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Somenath Biswas 

Computer Science Program 
Indian Institute of Technology, Kanpur 

April 1980 

Like prograims in familiar procedural languages, 
decision tables also specify algorithms with the help of two 
atomic operations, namely, tests and actions. What sets, 
however, decision tables apart from programs is that, 
in the execution of a decision table, no test can follow 
any action. This property, termed as test-action separa- 
tion, endows decision tables with many attractive advanta- 
ges e.g. ^clarity, parallelism, a natural test-data selection 
strategy, etc. ’goto' as an action, in any form, destroys 
test -action separation and for this reason, such actions 
go’s excluded in the definition of decision table used in 
this thesis. 

It has been noted that exploitation of test-action 
separation in decision tables requires assertion analysis 
which decides if an input instance exists for a given 
assertion. Because assertion analysis, in its general form, 




is undecidable, it is necessary to consider restricted 
classes of assertions. 

In this thesis, an important class of assertions has 
been considered. This class is comprised of sets of linear 
constraints, i.e,, inequalities and equalities, over vari- 
ables that can take only non-negative integer values. An 
algorithm has been developed here which decides if a given 
set of such constraints has a solution or not. The motiva- 
tion of the algorithm has been to exp].oit the likely abundance 
of very simple constraints found in a typical decision table 
environment. The algorithm is essentially a backtrack proce- 
dure which is guided by the so-called reduced network to 
prune the solution space. The reduced network captures the 
very simple constraints occurring in an input sot of cons- 
traints. 

Decision table, as defined here, is limited in its 
scope to specify algorithms. Generalization of decision 
table, available in the literature, all fail to retain the 
property of test-action separation. This has motivated the 
consideration of the other problem that has been dealt with 
in this thesis, namely, how to specify algorithms, using 
decision tables, w^si*® a single decision table is inadequate. 
The possibility of using sets of decision tables has been 
explored by relating programs to decision tables. The 
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relationships reported here are via decision trees (abbre- 
viated as dt’s) which are interchangeable with decision 
tables. 

It has been shown that any given loopless flowchart 
can be converted to a meaning-preserving dt. Further, it 
has been shown that an infinite set of dt's can capture all 
terminating computations of any given program and such a set 
is recursively enumerable. For the purpose of finitely 
specifying an algorithm by an infinite set of dt’s, the 
notion of generating rule sets has been introduced. It has 
been shown that a generating rule set exists for any program 
that terminates on all its valid inputs such that the pro- 
gram and the generating rule set both specify the same input- 
output mapping. 

To illustrate the notion of generating rule sets, 
two generating rule sets have been given for a small but a 
non-trivial program. One generating rule set has been ! 

justified to be indeed for the example program and the other 

in I? 

has been shown' equivalent to the first generating rule sot. 

It has turned out that the second generating rule set is 
an interesting one as it reflects clearly the underlying 
strategy of the example-program. 
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IITTRODUCTION 


1.1 D ecision Tables: T heir Syntax and Interpretatio n ; 

Decision tables orisinated in late fifties when two 

\ 

groups, working independently, one in General Electric/ and 
the other in Sutherland (both are business organizations in 

r 

the United States of America) , discovered that a tabular 
format was best suited for the specification of the algorithms 
they were dealing with. That two groups arrived indepen- 
dently at the same concept goes to show the naturalness of 
the concept. After alD., use of tables to specify algorithms 
is but one step from the use of tables to represent fvinc- 
tions and, so many familiar functions are usually represented 
in this fashionj as examples, one can cite multiplicp.tion 
tables, truth tables, group operation tables^ etc. 

The basic decision table now has come to have the 
so-called limit ed-entrj^ decision table format. Such a deci- 
sion table D can be vie^red as a matrix M with (n + m) rows 
and (1 + p) columns, n, m^and p are all greater than or 

equal to 1. In the first column, the first n elements i.e., 

■fU 

elements (1, 1) through (n, 1) arc conditions and rest of 
the olements^i.e. , (n + 1, 1) throu^ (n + m, 1) arc a ctions . 




Conditions are Boolean expressions over some procedural 
language (they can ev^.luate to either true or false) » while 
actions are imperative sentences of the language except 
’goto' 's in any form ~ implicit or explicit.^ Therefore, a 
finite sequence of actions has the semantic eoui valence 
of a finite sequence of assignments. The procedural language 
used to specify the tests and actions of a specific decision 
table system is commonly termed as the base language of the 
system. The conditions as well as the actions are usually 
numbered from the top to bottom. Thus, the element (i, 1) 
of the matrix H, i.:' i ^ n, is the i-th condition, n amed as 
and the element (n + i, 1) is the i-th action, named 
as Aj^* 

Columns 2 through (p + 1) in M are the p rules of 
the decision table D, and these rules are usually numbered 
from tbre left to right. Thus, the i-th rule, named as R j^. 
refers to the (i + l)-th column of the matrix II, The first 
n entries of any rule in D, i,e., the elements (1, i+1) 

through (n, i+1) in II, are the condition entri es of Rj^ and 
the rest of the entries of Rj^, namely elements (:i+l, i+1) 
through (n+m, i+1); are the action entries of A condi- 

tion entry can either be T (for 'true'), or F (for 'false') 

1 Though in many /.decision-table literature, 'goto's are 
not banned as actions, we, howevor, will vievr decision 
tables with 'goto's as an extension of basic decision 
tables, because of the reasons that will become apparent 
presently. 
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or - (for 'not relevant'). An action entry, on the other 
hand, can either be X (for 'execute') or - (for 'do not 
execute' ) . 

It is customary to separate the first column of M 
from the rest by a vortical double line, and the first n 
rows from tho rest by a horizontal double line. The four 
quadrants thus formed are named as follows. The top-loft 
quadrant is the c ondit i on stub and the bottom-left is the 
action stub . The top-right quadrant is the conditi on entries 
of tho decision table and the bottom -right quadrant is its 
act ion entries. 

(There is another format for a decision table which 
is known as the extend ad- entry format. This format is only 
an economical way to specify a limited-entry decision tablei 
every extended— entr^^ decision table can bo trivially converter 
to its underlying limited -entry form. Thus, extended-entry 
decision tables can bo regarded as a notational variant of 
limited' entry ones, there fore, we can ignore the foimer 
without any loss of generality). 

The interpretation of a decision table is in terms 
of the interpretation of its rules. Let us consider a rule 
of a decision table having n conditions and m actions. 

If the J-th condition entry of is T, then asserts the 
condition Cj. Similarly, if the entry is P then the 
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negation of is asserted, and if the j*-th condi- 

tion entry is then the condition is not relevant for 
R^, The asserti o n of a rule is the conjunction of tho 
assertions of all its condition entries. Denoting as 

the assertion of the rule R^, wc have, therefore, 

n 

= A p . 

3=1 

whore , 

/Cj if tho j-th condition entry of R^ is T 

Pj = J if the j-th condition entry of R^ is P 

uT if tho j-th condition entry of Rj^ is - 

/ 

The action entries of tho rule Rj^ defines a sequence 
of actions, a^, wliic’i can be defined in the following manner; 

Pp) ••• I Pijj 

/Aj (i.o., the j-th action) if the j-th 
where, = /action entry of R^ is X,'no operation' 

l^if the j-th action entry of Rj is - 

for 1 j i. 

(If A and B are two actions then A» B denotes that 
A is performed first, followed by B), 

Now, the interpretation of 1ixe rule R^ can be 
simply stated as ' if 9j ^ the assertion of R^) is true , 

then perform (i.e,, the action sequence of R^^). The inter- 
pretation of a decision table is, given an inpu t instance . 
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select that ono and, only rule Rj , the assertio n of^ w hich Is 
true for the i nput insta nce, and perform thjs^ act ion seonence 
of 

We emphasize that a decision table is int erpretab le 
only if any given input instance satisfies the assertion of 
one and only one lule of the table, otherwise the table is 
incorrect. Immediately then, we can define the following two 
types of errors, as given equivalently in Ibramsha and 
Rajaraman (1978). A decision table is said to have real 
ambigu i ty ^ if there exists an input instance which satisfies 
the assertions of more than one rulei and the tablo has real 
incompleteness if there exists an input instance that satis- 
fies none of the rule-assertions, A syntactic chock of a 
decision table can detect the so-called apparent ambiguities 
(or incompletenecs^) , only a subset of which will be real 
ambiguities (incompletenesses), as explained in Ibramsha and 
Rajaraman (1978). 

Prom the above, we see that the execution of a 
decision table means the following. Given an input instance, 
first of all, the conditions in the condition stub are tested 
to see which of them are true and which are false for the 
input instance. Then, depending on the outcome of these 
tests, that rule is selected the assertion of vxhich is found 
to be true. And finally, the action sequence of the selected 
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rule is performed. We note, therefore, that in a decision 
table execution, all the tests precede all the actions. 

King (1967), Rajaraman (1971), Pollack etyal. (1971) , 
and Metzner and Parnes (1977) contain many examples of 
decision tables. 

1 . 2 T estrActio n Cota aration in Decision Tables • 

As we have noted in Iho last section, the atomic 
operations using which a decision table specifies an input- 
output mapping arc tests and actions » a test tests if a 
Boolean expression over a procedural langxiago, the base 
language, is truo or not^and actions are imperative state- 
ments of the base; language* Now, a program in that base 
language will also use toots and actions as the atomic 
operations to represent an input-output mappirg. Wo soo, 
therefore, that a cormon mooting ground existo for proce- 
dural languages and decision table systems as algorithm 
specification devices. 

There is, however, a crucial difference ^between 
decision tables and programs in procedural languages^ which 
sets the former qualitatively apart from the latter, and 
this difference is the following, ^Vhereas in the execution 
of a decision table no test can follow an action, for 
programs there is no such restriction. We shall rpfer to 
this restriction as the discipline of test-ac tion separation . 
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We have called the r estriction a discipline because, as we 
shstll see in the next section, many advantages result from it. 

There are, of course, other differences between 
programs in procedural languages and decision tables, but 
tost-action separation is the most basic, as most of the^ 
other differences are consequences of test-action separation, 
(We note that in some interpretations of decision table as 
discussed in King (1969), a decision table can be non- 
deterministic in -that any of two or more rules may be selected 
for the same input-ins tanco. Decision tables under such 
interpretation, would, therefore, have another crucial 
difference with the usual programs as they are deterministic. 
But our interpretation rules out this difference as one and 
only one rule can be selected for a given input instance ), 

1.3 Ramifi cations o f T ost -Action Se pa ration ; 

The discipline of test-action separation endows 
decision tables with many advantages j some of the important 
ones are reviewed below. 

Firstly, the test -action separation givee us an 
attractive framework for proving properties about the input- 
output mapping specified by a decision table. This comes 
about in the following way. 

Let us consider an interpretable decision table with 
p rules, Rj^, R2» ...» Rp* Because every input instance 
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will satisfy one and only one of the p rule-asniertions, we 
can view the input domain to be part i tioned in p classes, 

II, l 2 > •••! ^p)^y P rule- assertions, wheroj 

{ X I X is an input instance 
- satisfying the assertion 
of the i-th rule > 

for 1 1 i ^ p. 

For each input class I^, the decision table specifies 
a finite sequence of actions, (the action seouence of 
which is to be executed if the input is in the class In 
other words, the input-output mapping as specified by the 
decision table for a given input instance is same as that 
of one of the a^^'s, depending on which input clasc the input 
instance belongs to. 

Therefore, for a given decision table, if we want 
to prove that its input-output mapping satisfies a given 
property P, wo can do so in the following two steps. 

Step 1 : Ensure that the decision table is interpretable , 
i.e.j every input instance satisfies one and at most one of 
tho rule -assert ions. 

Step 2 : For each rule R^ separately, show that the input - 
output mapping specified by a^, on an input satisfying 9^, 
has the property P. (Wo recall that and 9^ denote the 
action sequence and the assertion of R^, respectively). 
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Step 1 seeks to establish that the decision table 

is free from both real ambiguity and real incompleteness, 

Ibramsha and Rajsraman (1978) gives a framework in which 

this can be accomplished. Moreover, Step 1 is clearly 

independent of the nature of the property P. Therefore, 

once the decision table is certified to be free from real 

ambiguity and incompleteness, what remains to be done for 

a specific property P is only the Stop 2, This step reduces 

the task of asserting P about the input-output mapping of 

the decision table to a finite number of subtacks, each of 

which has to assert about only a sequence of actions. Now, 

such a sequence- can bo conceptually thought of as a sequence 

i5 

of assignments as each action cithcr^an assignment in itself 
or can be so modelled. 

Program proving is simplest for the class of finite 
sequence of assignments. We can> e.g. , use the axiomatic system 
of de Bakker (1971) to assert properties about ni^ch sequences. 
Also, USG of symbolic execution is of groat efficacy here, 
because, (unlike for a general program), every variable at 
the end of symbolic execution of a sequence of assignments 
will have a unique symbolic value. 

We can, therefore, conclude that the natural decom- 
position of the problem that a decision table qffers for 
asserting properties about its input-output mapping is of 
great advantage. This natural decomposition also endows 
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decision tables with a great amount of clarity irhich has 
been noted by many authors (e.g, . Metzner euid Barnes (1977)). 

We can see that all this is a direct cons oqu one.’ of test- 
action separation. 

The second important advantage that accrue^out of 
the test-action separation is that it makes decision tables 
naturally support parallelism. This is so because, as all 
the tests precede the actions, the tests are made before any 
state charge has occurred (due to an actiqii). All the te^sts 

*- '■ ' ''' i'C ;i#w- i A, ' ’.'."♦K. 

then test the same (i.e,,the initial) state and therefore 
all of them can be made in parallel. Another reason why 
parallelism is enhanced by decision tables is that all the 
actions that are taken here are not interrupted by any 
tests, Davis (1972) reports that for such action sequences, 
parallel machines like STARAN, ILL3AC I V^etc,^ achieve a 
significant speed-up over their uniprocessor counterparts. 

The third important ramification of the test-action 
separation is that it leads naturally to a test data selection 
strategy. For a decision table with p rules a natural set 
of test data is one with p elements, one for each rule. Now, 
we know that to obtain an input instance that will exercise 
a given rule, all we have to do is to find one that satisfies 
the assertion of that rule. This way, we can get a set of 
test data for a decision table. 
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This stratejgy of test data selection for decision 
tables is so attractive that Goodenough and Gerhart (1975) 
suggests its use for a program after having it cast in the 
form of a decision table, 

1,4 Import ance of. A ssertion Analysis i n Decision T able Usage ; 

Let us first define what we mean by assertion analy- 
sis, We have noted that a condition in decision table 
parlance is a Boolean expression, so it can be either true 
or false (depending on the values assigned to the variables 
in tiae expression). We can assert (as done by the condition 
entry in a decision table) a condition either true or false. 
Conjunction of such assertions is also an assertion (as the 
assertion of a rule). Assertion analysi s decides if a given 
assertion is true for at least one assignment of values to 
the variables in the assertion, and , if true, the analysis 
produces such an assignment of values. 

Answers to many .questions that we may like to ask 
about decision tables can be obtained by assertion analysis. 
Below we list some important uses of assertion analysis. 

( a ) In error de tection : 

In a decision table, we have real ambiguity if an 
input instance satisfies the rule* assertions 6^ and of 
two rules and respectively. In that case, the 
assertion (©j^/V ©j) is true for atkeast one input instance. 
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Thus to find if some two miles lead to real ambicuity, we 

can use assertion analysis on the conjunction of the two rule- 

assertions. 

For the detection of real incompleteness alsoy 
we can use assertion analysis. Because this error will be 
there in a decision table if and only if the negation of the 
disjunction of all the rxile- assertions is true for at least 
one input instance. 

( ^ ) In test data sele ction : 

We need to use assertion analysis to produce an input 
instance for which the assertion of a given rule is true. For, 
such an input instance will exercise the given rule. 

( c ) In jglp timization: 

It has been shown, as in Rajaraman (1971) that if we 
can replace some T or F condition entries - s without 
altering the meaning of a decision table, then that may lead 
to the optimization of the decision table (by eclipsing two 
or more rules to a single one). Now, we can replace a T 
(or F) in the condition entry for some condition C of a rule 

v; 

with a - if the conjunction of the sussertions of other 
entries imply the truth (or falsity) of C, (King (1969)) and 
this will not alter the meaning of the decision table. An 
assertion 0 implies another assertion 0 iff the assertion 
9 A ^ is not true for any assignment of values to the 
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variables in 6 and 0 , Thus we see, we csan use assertion 
analysis for the purpose of optimizing a decision table. 

Prom the above, it can be seen that with the help 
of assertion analysis, an attractive operating environment 
can be envisaged for decision tables. Such an operating 
environment can help in error detection, test data selection 
and in optimizing^ etc, , and will be of immense help to 
decision table users. 

1.5 Problems in Decision Table Use ; 

We have seen in Section 1,3 that decision tables 
have important advantages like clarity, parallelism, and 
ease in test data selection. In spite of these advantages, 
decision tables arc rarely used in everyday programming. 
Reasons for this lie, wo believe, in the follovring two 
problems. 

(1) Use of decision tables will be a departure from 

usual programming practices for most users. Therefore, to 
encourage decision table usage, every possible system aid 
should be made available to the users. To this end, the 
operating environment envisaged in the last section, will 
be of groat help. The problem is that such an operating 
environment is not available. 


We have seen the critical importance of assertion 
analysis in the envisaged environment. Therefore, we need 
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algorithms for assertion analysis. However, the problem 
is undecidable in its "eneral fom. We should tlien attempt 
for algorithms which will perform assertion analysis effi- 
ciently for interesting restricted classes of assertions. 
With such algorithms, it will not be difficult to build 
a useful and an efficient operating environment for decision 
tables. 

(2) The second and more important problem that deters 

the use of decision tables in evor3^day progran)aing is as 
follows. Decision tables, as we have defined them, are 
limited in scope as an algorithm-specification device. This 
follows immediately when wo realize that, on any given input, 
a decision table can invoke only an afpriori bounded amount 
of computation for making transition from the initial state 
of the computation to a final state. This is because a 
bounded computation (equivalent to a finite secuence of 
assignments) is all that is achieved by executing a sequence 
of actions specified in a rule. Many algorithms require, 
however, arbitrarily large amount of computation depending 
on the input I this requirement is met in procedural lan- 
guages with the use of loop constructs. 

Clearly then, we require to extend the notion of 
basic decision-table structure. Various generalizations, 
that have been proposed in the literature, attempt to do 
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so essentially by introducing a 'goto' as an action in some 
form or the other. (Use of 'goto', we recall, is not per- 
mitted in our decision tables). Introduction of 'goto', 
however, destroys the property of test-action separation as 
a 'goto', now an action, can lead to more tests. Me have 
seen in Section 1.3 that the attractiveness of decision 
tables stems from the property of test-action separation 
and when this is lost, the motivation to use decision tables 
is also mostly lost. It is, therefore, not surprising that 
the various generalizr'.tions of decision tables are rarely 
used in practice. 

A possible way out of this problem has been explored 
in this thesis. If vre find a single decision table inade- 
quate for an algorithm we can try to use a set of decision 
tables rather than a self-defeating generalization. Therefore, 
the question that arises naturally is the following. Given 
a program or a flowchart, can wo find a single decision table 
to specify the coded algorithm? If not, can we use a set 
(possibly infinite) of decision tables to do so end then, 
how to specify such a set? 

1. 6 Previous Wo rk; 

Let us first review previous worKS relevant to the 
operating environment envisaged in Section 1.4.' Some work 
has been done for tlio detection of ambiguity and incomplete- 
ness in decision tables, the earliest of which is by 
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Pollack (1963). His mothod, however, can detect only 
apparent cases of such errors, lAiile it is only the real 
ones that need to be detected. Most decision tabled will 
have apparent errors, and decision- table designers may 
like to incorporate apparent ambiguities which are not 
real ones in a decision table for the purpose of optimizing 
it, as shown by Rajaraman (1971). Therefore, Pollack's 
method will give us many unwanted error messaged 

King (1968) shows why assertion analysis is necessary 
for the detection of real ambiguity and incompleteness, and 
King (1969) proposes the use of predicate calculus for asser* 
tion analysis. (We lipve noted in Section 1.4 that assertion 
analysis is crucial also for some other aspects of the 
envisaged operating environment). It has been shomi by 
Iluthukrishnan (1969), that assertion analysis, in its gene- 
rality, is uneolvable. This led Muthukrishnan and Hajaraman 
(1970) to propose officiait algorithms for translating 
decision tables to programs which, incidentally, point out 
real ambiguity at ^ie execution time. 

Another approach to the problem of the detection of 
real errors stems from the realization that assertion analy- 
sis is solvable for restricted classes of assertions. The 
pioneering work in liiis direction was by Ibram'sha (1974) 
who has considered assertions which are sets of linear 
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constraints in real variables. He uses Fourier eliraination 
method for solving tl'is restricted assertion analysis 
problem. 

Assertion anals^sis is useful also in some other 
areas of Computer Science, in automatic generation of test 
data for programs, for example, Clarke (1976) restricts the 
assertion analysis to linear constraints and she uses a 
mixed- integer program package for this purpose. Foyer 
etyal (1975) handles non-linear constraints by the so-called 
' conjugate gradient procedure' which requires user -interact ion 
and even then, may not terminate. 

f . ^ ’ 4 ' 

The problem with ^ch methods is that they handle 
too broad a class of constraints to be even reasonably 
efficient I therefore- these methods should be used only when 
no simpler solution is available. By simpler solutions, we 
mean algorithms thst handle restricted classes of cons- 
traints on Specific data-type domains. Previously cited \ 

\ 

Ibramsha (1974), which considers only linear constraints 
in real variables is one such example. Another is 
Shostak (1978). A very fast algorithm has been developed 
there to handle assertions on data-typos having only equality 
as predicate, e.g.^ character data-type without the notion of 
collating sequence. 
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Next, in the field of exploring relatione^ between 
programs and decision tables, the thrust of the previous 


works has been to generalize the basic decision table struc- 


ture to make it equal in power with programs. The most 
common generalization is to introduce 'goto* as an action to 
re-enter the same table (thereby emulating a loop) and to 
enter some other table (so that some tests can be made after 
some actions are token). Muthukrishnan (1969) has shown that 


any Turning machine can be simulated by a decision table 
V7ith the capability of re-entering itself, thereby proving 
that this generalization can express any computable function. 


Lew (1979) shows how to transfoim any given program 
to an equivalent generalized decision table, which, apart 
from the capability of re-entering itself, uses an extra 
variable. Introduction of such a variable, however, reduces 
the transperancy of the encoded algorithm. 


Another generalization, by Mariya and Hir.amatsu (1972) 
adds labels to both conditions and actions to allow 
re-entering the decision table at any condition or action. 
This, of course, imposes an ordering amongst conditions, 
which now cannot be tested in parallel! this has been an 
Important attraction of decision tables. , 

Maes (1978) surveys many generalization effects, ^slc 
trouble with all of these is that the generalizations violate 
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the discipline of test-action separation as an action (goto) 
now can lead to more tests. We have seen in Section 1,5 
that the basic attractions of decision table stems from 
this discipline and when it is lost, there is no reason 
why anyone should like to use decision tables. We agree 
with I'laes (1978) when he concludes that in these generali- 
zations of basic decision-table structure tho inherent 

advantages of the decision.table foimat are almost totally 
lost. ' 

A few authors have considered the problem of generat- 
ing decision table(s) equivalent to a given program, 

i 

Cavouras (1974) gives one such attempt. The algorithm, that 
has been reported there, essentially converts the tree- 
structured subparts in a given flowchart to deci»^ion tables 
and defines appropriate control flow connections among these 
decision tables. Loops are taken care of by using ’goto’s 
as actions to re-enter tables. We can see immediately that 
test-action separation is no longer retained. Also, whenever 
a test follows an action in the control flow of the given 
program, a new decision table is needed to incorporate this 
test. This leads to the generation of trivial tables. For 
example, in a situation as in Figiii^ will lead to 

trivial tables of Fig, 1.2 . 





X«2i Catovuras* oonvinralon of tho 
above flovotaart. 
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(¥e shall see in Che-pter III that it is possible 
to obtain a single eouivalent decision table for tho program 
segment shown in Pig, 1.1 , the table will have three condi- 
tions to test). 

Generation of trivial or near-trivial decision tables 
and loss of test-action separation property defeat the main 
purpose of Cavouras^ algorithm which is to obtain an 
alternative description of a given program with greater 
clarity. This has been acknowledged in Cavouras (1974). 

Maes (1978) points out other efforts to obtain decision 
tables from programs which make the tacit assumption that a 
change in the relative order of tests and actions in a program 
execution does not affect the outcome. This assumption is 
not true in general and, in fact, false in most cases. Therefor 
any scheme to convert programs to decision tables using the 
above assumption is of little value in establishing relation- 
ships between programs and decision tables. 

1*7 Present Work ; 

This thesis attempts to contribute towards tho solution 
of the problems mentioned in Section 1,5. 

Firstly, we have attempted to extend Ibramsha (1974) 
by considering another important restricted class of asser- 
tions. Our class is comprised of sets of linear inequalities 
and equalities over variables that can take only non-negative 
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integer values. (An integer variable that can take both 
positive and negative integers can be equivalently replaced 
with the difference of two variables each of which is res- 
tricted to take only non-negative integers, as pointed out 
in Salkin (1975). Therefore, our class of assertions is 
general enough to implicitly take oare of integer variables 
of unrestricted signs as well). The term 'constraint' is 
commonly used for equality and inequality assertions and 
deciding the feasibility of a set of constraints refers to 
finding out if an pssignment can be made to the variables in 
the constraints so that all the constraints in the set are 
Satisfied (i.e..all tho assertions arc true). In other words 
therefore, our problea is to dc.-cide if a given set of linear 
constraints in non-negative integer variables is feasible and 
if feasible, to obtain a feasible assignment. lor brevity, 
wo have referred to this problem as tho intege r feasibil ity 
prob lem. Linear constraints with variables that trke only non 
negative integer values occur very frequently in algorithm 
design, specially in non-numeric applications. We note that 
many conditions on character data-type, with or wi Siout the 
notion of collating sequence, can be easily transfoimed to 
linear constraints in non-negative integer variables. 
Therefore, an efficient algorithm that solves the integer 
feasibility problem will aid greatly/ assertion analysis. 
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^Integer feasibility problem can be solved by steoidard 
integer progranuning teciiniques. These techniques, however, 
do not exploit a speciality of our problem domain n.^imely, 
the likely abundance of very simple constraints (e,g. ^x < y 
or z ^ w + 7). This motivated us to design an algorithm 
for integer feasibility problem which would exploit simple 

h- r 

constraints. Chapter II of this thesis is devoted to the 

proposed algorithm. 

Next, we have explored the relationship between pro- 

{ U; 

grams or flowcharts onjone hand and decision tables on the 
other. We have avoided any generalization of tlie decision- 
table structure that destroys the discipline of test-action 
separation. We have found that this relationship can be 
expressed naturallj^ in terms of decision trees wliicli are 
loopless flowcharts obeying the test-action separation. 

A decision tree can be easily converted to a decision table 
which does not have real ambiguity or incompleteness. Therefore 
any relations^^that we establish between decision trees and 
programs will apply equally well between decision tables 
and programs. 

We have shown that any loopless flowchart can be 
transformed to an equivalent decision tree without intro- 
ducing any extra variable. Then, we have shown that any 
terminating computation of a general program can be 
equivalently captured by a decision tree, and also that 
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ve require an infinite set of such trees to repreoent equi- 
valently the compute'' t ions of a program in general. Therefore, 
to use decision treers for the purpose of specifj’’in" algo- 
rithms, we need a finite mechanism to handle such infinite 
set. We have introduced the notion of generating rule sets 
as such a mechanism. As an example, we have specified the 
algorithm coded in a small hut non-trivial program in terms 
of generating rule sets* we have given two such sets. 

It was gratifying to see that the underlying strategy of the 
example- pro gram can he understood elegantly in terms of one 
of the two generating rule sets given. 

As we have mentioned, the Chapter II of this thesis 
discusses the proposed algorithm for solving the integer 
feasihility problem. Chapter III defines decision trees 
and then explores hovr these can he related to a program or 
a flowchart. Chapter IV introduces the notion of generating 
rule sets and then, through an example, we sec how these can 
he used to specify algorithms. The last Chapter^ i.e.^, 

Chapter contains certain concluding remarks and suggestions 
for further work. 

There are three appendices, all concerning the integer 
feasihility problem. Appendix A shows that the prhhlem, as 

t 

well as some of its restricted versions, fal3^ in the 
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category of strong|ily-l^P complete problems. Appendix B 
shows how linear ineoualities can be converted to equi^ 
valent equalities. Appendix C discusses two necessary condi 
tions for a system of linear equations to have a non- 
negative integer solution. 




CHA.P'll;p. II 


AIT ALGORITHM TO DECIDS TIIR ]?EASI?5ILITY OP A SET OP 
LINEAR INTEGLR CONSTRAINTS 

2 . 1 Introduct ion : 

In the present chapter, we shall develop an algorithm 
to decide whether a given set of linear constraints, in 
variables that take only non~negative integer values, is 
feasible or not. If feasible, we shall also be interested 
in generating a solution satisfying the set of constraints. 
For brevity of reference, we have called this problem as 
the int e ger f easibility, pipblOiS> mentioned in the last 
chapter* Vie shall make the usual assumption that all 
numbers occurring in a given instance of the problem will 

be integers. Further, we assume that for each variable^, 

( 

an uppei|bound is known a priori. This assumption helps us 
to convert any set of linear constraints to an equivalent 
set of equations lAiich can be aggregated to a sin^e equa- 
tion that our algorithm uses. 

As we have mentioned in the last chapter, our moti- 
vation here is towards the design of a powerful assertion 

^ As the variables that we deal with here are all restricted 
tc taking only non— negative integer values, from here on 
we shall refer to them, merely as variables, the restric- 
tion will be tacitly understood. 
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analysis system. The present algorithm considers an 
important restricted class of assertions ^namely, the class 
of linear, integer- variable constraints^ and should supple- 
ment the existing algorithms for other classes of assertions, 
like the algorithm of Ibramsha and Rajaraman (1978) for 
linear, real variable constraints. 

To solve the integer feasibility problem, we can 
use any of the various integer programming techniques tliat 
have been developed over the years, Salkin (1975) has a 
detailed account of such techniques. Yet we chose to 
devise a new algorithm because these techniques do not 
exploit a speciality of our problem domain. The cons- 
traints that we are interested in occur as conditions in 
decision tables. An oven-uelming majority of such cons- 
traints will be quite simple like x<,yorx>y + 3. 
Therefore, our algorithm should exploit the likely abundarce 
of such constraints in an input instance. General integer 
programming techniaues do not do so because the constraints 
which are to be considered there, can arise out of any 
situation and therefore, non-simple constraints are probably 
more likely than simple ones. On the other hand, cons- 
traints in a decision table or in a program tend to be 
simple ones^as the designer, for the sake of intellectual 
manageability, like^ them that way. In a program, the 
following tes*^ 
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- 87x^ + 55^2 + 24x^ + 1473^ ” ^^^2 - 

is sure to invite commanto, if not laughter. However, tliis 
constraint appears in an illustrative example of a well- 
known paper on the branch and bound technique in integer 
programming (Land and Doig (I960)). 

We cannot, however, expect that evoiy problem instance 
will have only simple constraints. Therefore, our algorithm 
has to be general enou^ to be able to solve any given 
instance of the integer feasibility problem. We have shown 
in Appendix A that the problem is strongly NP-complete and 
remains so even with certain severe restrictions. The 
implication is that (with the present knowledge about NP- 
complet eness ) , any algorithm to solve the problem will 
essentially search implicitly or explicitly the entire 
solution space and that we cannot hope to do better by 
imposing restrictions on the problem and yet have a useful 
algorithm. 

The algorithm that vre have developed here is a back- 
track procedure where the solution space is pruned using 
the simple constraints. A very small example can illustrate 
the basic idea. Let us consider the following three cons- 
traints; 

1) 2x + 5y *= 19 

2) X > 1 

3) y > X 
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A ‘backtrack procedure to solve the first constraint 
will consider various assignments to x and y. But quite a 
few of these are ruled out by the next two constraints. Our 
algorithm will first assign values to x starting from 1 
(not zero, because of the 2nd constraint), and then will 
assign a value to y which is greater than the assigned 
valuo of X aijleaBt by 1 (constraint 3 )» This way, we avoid 
various assignments which can never satisfy the entire set. 
Constraints like (2) and (3) determine an order in vxhich 
variables are assigned values (like here, x before y) and 
the lowest value that may be considered for a variable when 
certain partial assignments have been made, (In the example, 
if we have assigned 2 to x then y cannot take any valuo loss 
than 3). 

A . ^ 

In our algorildim, constraints like (2) or (3) go to 
build a structure that guides the backtracking of a single 
aggregate equation, \diich, in effect, is equivalent to all 
constraints not reflected in the structure, VHien the 
structure is empty, then the algorithm degenerates into 
a straightforward backtrack routine to solve the aggre- 
gate equation. When, on the other hand, every constraint 
goes into the structure, then we have no backtracking (as 
the aggregate equation is empty), and the feasibility is 
determined in polynomial time. For most of the input 
instances, where neither the structure, nor the aggregate 
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equation is empty, the performance will be somewhere between 
these two extremes. 



First, let us define what we mean by simple cons- 
traints. 


A simple constraint is a linear inequality which can 
be written as 

either (a) x (e) y + 0 , 0 is either > or ^ , 

or (b) X c , is any one of > , ^ , < , je , 

where x and y are variables and c is a non-negative integer. 


V/e can see that a type (a) simple constraint relates 
two Variables in such a way that if the ri^t-hand side 
variable is either assigned a value, or is shown to have a 
certain lowei+bound, then the constraint imposes a loweiroound 

l * 

on the left-hand side variable. A type (b) constraint, on 
the other hand, imposes an absolute loweijbound or an absolute 
uppeijbovixidt (To distinguish such bounds from the bounds 
which are implied when values are assigned to some variables , 
we require the adjective 'absolute' here). 

Every simple constraint with a strict inequality 
(i.e., < or > ) relation can be easily transformed to an 
equivalent simple constraint with a nonstrict inequality 
(i.e., < or > respectively), by adding unity to the 
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appropriate side of the inequality sign. For example x > y 
can thus be transformed to x > y + 1. Therefore, we assume 
hereafter, without any loss of generality, that every giv en 
s imnlo constraint faang~^nly nonf s trict inequality . 

A set of simple constraints implies certain relation- 
ships among the variables involved and certain bounds on 
them. A constraint network is a single structure to capture 
all this. 

The constraint network for a given set of simple 
constraints, S, is a digraph with weighted edges j- where 
the set of vertices V and the sot of edges^ B of Dg are 
defined as follows. (Constraint networks may also be called 
simply as networks ) . 

V, the set of vertices of D_ : For every variable x (or, a 

_a n. — , - — - ^ — 'S 

constant c) occurring in the set S, there is a distinct 
vortex v_ (or, vertex v^) in V. No other element is allowed 
in V. 

(The above definition points out a notational conven- 
tion that wo shall follow. The vertex corresponding to the 
variable x will be denoted as v^. Similarly, v^ will denote 
the vertex corresponding to a coustaat c). 

B. the set of edges of Every edge in Dg can be defined 

in teims of any one of the following three classes. No other 
edge is a member of E. 
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Class (a): (x and y are variables in S) 

There is an edge from to v^ with a weight w iff 
there exists the constraint y ^ x + w as a member 
of S, ihe set of simple constraints, 

(Note that w can never be negative). 

Class (b): (x is a variable and c is a constant) 

There is an edge from v„ to v (or v to v ) with 

X C U X 

the weight zero iff there exists c ^ x (or x ^ c) 
as a member of the set S. 

Class (c): (c^ and c^ are two constants) 

There is an edge from v_ to v with weight w iff 
c. < c. and w = c . - c. , 

1 J J i 

This completes the definition of a constraint network, 
No note that in tiiis definition there is a possibility of 
multiplicity of edges betweon v^ and Vy, where x and y are 
two variables. Should such a caso arise, then we retain 
only that edgo which has the largest wei^t. Because, the 
constimiint corresponding to this edge implies Uie constraints 
corresponding to the other parallel edges. 

By examining the edge (if it exists) between two 
vertices, we can obtain the simple constraint that gave 
rise to this edge. Therefore, the constraint network is 
sn alternative description of 'the siiople constraint set and 
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an 3 ’'thing that can be deduced from the latter can be alterna~ 
tively deduced from the retwork. Moreover, this alterna- 
tive description has a pivotal role to play in our algorithm 
to solve the integer feasibility problem. 


Note ; It may bo asked why the definition of sinQ)le cons- 
traints does not include constraints like 

1, X = y and 2, x y + 3 

Constraints like (1) above can, of course, bo trans- 
lated as equivalent simple constraints, as x ^ y and y 2 . ^ 
in this case. Or, we can treat such constraints as non- 
simple constraints and proceed with our algorithm. However, 
the best use of (1) above can be made in simplifying the 
problem by eliminating one of the two variables involved 
in the constraints (i.e, , here, substituting y for x 
everywhere and that takes care of the constraint). Such 
simplification may be done before invoking our algorithm, 
as a pre-processing of the input. The pre-processing should 
include the check to sec if the equations in the problem 
instance have a solution in reals. Such a chock is inexpen- 
sive and will detect certain obvious infoasibilities as in 
X = 3f y = X and y « 5. 

On the other hand, if wo like to treat the second 
constraint as a simple one, then constraint networks will 
be allowed to have negative-wei^ted edges and then the 
necessary condition of the next section will no longer be 
valid. As a consequence, we shall not bo able to reduce 
every network to an equivalent acyclic digraph as we do in 
Sec, 3*6, Such reduction loads to great efficiency in the 
overall algorithm. In order not to forgo this, we shall 
regard constraints like (2) above as non-simple constraints. 

Example ; 

Let us consider the following set of ten constraints; 


1 , 

3. 

5. 

7. 

9. 


w > z + 1 , 

5 > P , 
p 1 q . 

X >. r ^ 

3x + 3 < y and 


2. 

4 * 

6. 


rs 

Urn 


p + 2 w , 
P L 1 # 


L X 

1 q 


10 , 2w + X + 5z = 10 




34 


Each of the variables can take only non-negative 

integer values and is assumed to have an uppeijbound of 9. 

I 

The fiiet eight of the above constraints can be 
rewritten as, 


I 

1 . 


3. 

?; 


w i z + 2 
4 1 P 
P L 9 
X > r 


4. 

s'. 

o; 


w ^ p + 2 
P i 1 

q L X 

r i q 


Therefore, we can identify them to be simple cons- 
traintsj 3' and 4* as of type 2, the rest are type 1 simple 
constraints. 


The constraint network for this set of eight cons- 
traints is given in Pig. 2.1. 


V 

X 



Pig. 2.1; The constraint network for the simple - 

constraint set of the example in Sec. 2. 2. 

We shall see in the subsequent sections how the two 

non-simple constiaints are to be handled and whether this 

example set of constraints is feasible or not. 
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2.3 A necessary Con dit ion for Feasi bil it y ; 

Before stating this important condition, first we 
state two properties of the constraint network. 

P roperty 1 : The weight of each edge in the networic is 
non-negative. 

This follows directly from the definitions. 

Property 2 : If in the network, there exists a path from 

V to V and if w is the sum of edges comprising the path 
P ^ ^ 

then the following relationship between p and q 

q ^ p + w 

is implied by the simple constraint set. 

The property follows from tbe definition of edges 
and the following property of inequalities: 

If p 2 l q + r and q ^ q’» then we can substitute 
q' for q in the fiiet relation to get p >. q* + r, 

''jlL /Poliowing lemma states the necessary condition. 

Lemma 9 . 1 « If a Set of Simple constraints Is feasible^ 
then in tbe corresponding constraint network every cycle 
(should it exist) is comprised only of zero-weighted edges. 

Proof : We show that if a network contains a cycle with 
ataleast one non— zero weighted edge, then the corresponding 

I I? 

simple- constraint set cannot feasible. Let v^ and Vy be 
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two vertices on such ci. cj^cle. Let p be the sum of the 
weights of the edges xfhicli comprise the path, from v to 
V , in the cycle^and similarly, let q be the sum of the 
weights of the path from Vy to in the cycle. Therefore, 
from property 2, we ha,ve 

y f ^ X + p and x y + q 

Those two relations imply that 0 ^ p + q. This contradicts 
p q ^ 0, 1 conseouence t?\at the cycle contains at least 
one noiv-zero weighted e6ip;op. The conclusion is that the 

.V ' 

network containing the cycle cannot be feasible. 

It is to be noted, however, that the condition in 
the lemma is not sufficient for feasibility. This we can 

illustrate by taking the following 'three simple constraints 

(■ 

as an exan^lo. The consxrp.inos arc: 

X ^ 2 y > X -I- 3 y and 3 ^ y 

Pig, 2,2 is the network for the above constraints, 
which has no cycle, yet the constraints are infeasible. 



Pig, 2,2: An infeasible network having no cycle. 
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The necessary condition in the above lemma can be 
equivalently restated isr 

r~ 

Let D be a constraint nebuor’e for a set of simple 
constraints S. Then S is not feasible if in D, there exist 
two vertices v and v whicb are in the same strong 

ST 'd 

component^ of D, and there is an edge in D from v to v 

P Q 

having a non-zero weight. 

This immediately leads us to a method of checking 
for the nocessar 3 ?' condition in a given network. We can use 
the very efficient algorithm given in Aho, e'^’a!/ (1974) to 
find the strong components of the network. Then, for each 
strong component with more than one edge , we can examine 
the edges connecting the vertices in the strong component 
to soe if any such edge has a non-zero weight. If we 
find such an edge, then the condition in the lemma is vio- 
lated, otherwise the condition is satisfied by the network, 

2 , 4 Aggregation of ITo n-Simplo Con st raint s : 

V/e have assumed that a problem instance will include 
an upperbound on each of the variables. Using these upper^ 
bounds, it is possible to transform the sot of non-simplo 
constraints in a given problem instance to an equivalent 

1 In a digraph, two vertices vi and Vp are said to be in 
the same strong component if there is a path from v^ to 
V 2 and also a path from vp to v^. 




Bet of equations^ who re each equation is of thet^&'i!^,<«iri 


x.'s are the variables, and each coefficient a' is a 
^ i3 

position integer. Sallciii (1375) gives how such a transfoi'- 
mation can be made which wo have discussed in Appendix B, 

'Je note, each bj should be non~negative, else the equation 
with such a ri,^t-hand^ b j is trivially infeasible. The sot 
of equations is equivalent to the set of non-simple cons- 
traints in the sense that every non-nngative integer solution 
to the former is a solution to the latter and vice-versa. 

A well-known method called aggregation can be applied 
to such a set of equations, 3. This process builds a single 
equation, called the aggregate equation 

ra^ Xj^ = b , 

where each a^^ is also a positive integers, 
from S such that every non-negative integer solution of S 
is also a solution of the aggregate equation and vice-vorsa. 
Therefore, to decide tho feasibility of the set of equations, 
we may eauivalently consider the aggregate equation onlj''. 
Aggregation has been studied by several researchers, an 
account of which appears in Salkin (1975). 

Por our algorithm, we obtain the aggregate equation 
from the sot of non-simple constraints of a problem instance. 
It is generally acknowledged as in SgJ.kin (1975) r that 
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n 

aggregation is nn attractive process the aggregated 

J . V, 

set of equations is not too largo and numbers involved 

r" 

(as co^efficients of vari-ibles and the right-hand sides of 
equati^s) are reasonably small. These conditions will be 
satisfied by most of our problem instances. 

From a given set of constraints, we have collected 
the simple constraints in a sin{^e structure, the cons- 
traint network, and now non-cimplc constraints arc reduced 
to a single aggregate equation. V/e have mentioned before, 

that our algorithm to solve the integer feasibility 'will 

/' 

solve the aggregate equation by a backtrack^ procedure 
where the solution space will bo pruned by the constraint 
network. Therefore, wo sliall want that only those variables 
which occur in the aggregate equation should bo reflected 
in the constraint network. However, in general a variable 
(of a vortex) in a constraint network^ may not appear in the 
aggregate equation and vice-versa. Also, there may be 
vertices in the network corresponding to constants. Therefore, 
to conform the network to the aggregate equation, wo shall 
like to add vertices to or delete vertices from the network 
without changing the feasibility of the set of constraints. 
How we do this is discussed in the next section.' 

Exam ple: 

In the example of Section 2,2, there ^re two non- 
simple constraints, namely ; 
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1. 32: + 5 5 y anr* 2, 2w + x + 5z: = 10 

Cons-^^raint (2) is alread-'/ in the required foim. 

To put (1) in the reoulrod foiro, wc add first a 
slack variable s. Then vn get, 

5x H- 3 + S = y 

or, 3x + 3 + s ~ y = 0 

or, 3x + 3 + s - (9 - y' ) = 0 

uhoro, y' is the coroploncnt variable of y, we recall the 
absolute uppoi|bound of y is 9, so is for y' also. 

Thus (1) simplifies to: 

1*. 3x + s !- y' = 6 

Using one of the aggregation mothodo given in 
Salkin (1975) » we get the aggregate of (!') and (2) as (3), 

3. 40x + 14w + Hr + lly’ + 35z = 136 

2 • 5 Adf^i t ion £^. D elet ion of V ertic o s : 

As we have mentioned in the last section, it may be 
necessary to add vertices to or to delete vertices from 
the network. 

Addition of a new vertex is trivial. Because the 
variable corresponding to such a vortex is not related by 
any simple constraint, there will be no edge to or from 
this new vertex. Therefore, to add a vertex to the networic, 
we merely incorporate it as an isolated vertex. 
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Deletion on the other hand, is not so simple because 
wo would not like to lose nny relevant information in the 
process. To delete a vert os, it will be necessary to 
update the absolute boimds of its neighbouring vortices. 
Therefore, we require thot the absolute bounds for each 
variable be defined b:^forc any deletion takes place, 

ror a variable x, lot 1 and u^ denote respectively 
its absolute lowcrbound and its absolute upperbound. For 
each X, t is initialized to zero while u is initialized 
to a priori known upperb^^und of x a'\^ilablc in the input 
instance. 


Lot V be a vertex in a given network and that we 

r 

want to delete v from tho network, lot there bo m edges 

incident on v which originate from v_ , v^ , v and 

Pi P2 Pm 

lot those edges have wei^its w^^, W 2 , w^^^ respectively. 

Also, lot there be n edges originating from v and terminat- 
ing on vortices v„ , v„ , ..., v with weights Wn , wl,.^,, w 

qi q2 x ^ n 

respectively. Next, let us define 1 and U in the following 
way: 


and, 


L = 



if V corresponds to some variable, 
if V coTTGCponds to some constant, 


y* 

c • 


u = 


if V corresponds to some variable, y. 
c , if V corresponds to some constant, c. 
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Due to the possible updatings of absolute bounds 
in previous deletions, it Tur.y be that > u^. In ouch a 
case, these absolute bounds of y are such that no value 
assigned to y can satisfy -thai.and therefore the given 
input instance of the integer feasibility problem is not 
feasible. Therefore, the algorithm to decide integer 
feasibility, which is using the deletion process to delete 
Vj stops if it finds L ^ U, Ulso, deletion of v is accomp- 
lished using the following tx/o stops. 

Sto p 1; 

(a) For cvciy vtiriahlc x such that there is an edge frou 
v„ to V ill the nctxrork, u„, the absolute upporbound of x, 

A. 

is updated as, 

u ; = min tu^, U - > 

where is the weight of thvO edge from v^ to v. 

(b) For every variable, s, such tho.t there is an edge 
from V to v„ in the netx/or’:, 1„, the absolute lowcrbound 
of Zf is updated as 

: = max D + xr^) ^ 

x/hero is the weight of the edge from v to 

Step__^: 

(s.) Removo v and the (m + n) edges to and from v. 
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("b) Adc> to the network new mn edges as follows. Prom 
each V » 1 i 1 there will he a new edge to each 

, 

V > 1 1 j 1 and this edge will have the weight (w. + w.), 

C| j * j 

In the process, if multiple edges result botwocn two vertices, 
retain only that edge whidi lias the largest weight. 


Let IT he a nctwor!: from vAiich a vortex v is deleted 
hy ‘lilic above two stops to obtain the network N' . The stops 
pro such that if IT along with the absolute bounds on its 
variables is feasible^ tlicn so is N' along with its absolute 
bounds on variables and vice-versa. This may be justified 
duo to iho following. 

Let us suppose th^t in N, there are vertices v and 
Vg such -Uiat there is an edge from v^ to v with weight w^ 
and another edge from v to v^ with weight w. These two 
edges together reflect the relationship z ^ x + w^ + Wg, 
These edges, hov/evor, cannot be in W’ where v does not 
exist. To retain the above rclatioi/, a new edge is added 
in Step 2 from v^^. to v^ with weight + ^2). In this 

' ■ 

way, we can see that Stop 2 ensures that the relations in 
N reflected by a path through v are edso retained in N' • 


That is, an assignment of values, which arc within 
their respective absolute bounds, can be made to 
the variables corresponding to the vortices of N 
so that the constraints, reflected by the edges 
of N, are satisfied. 
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If V corresponds to a constant, then the edges to 
and from v reflect certain absolute bounds on the variables 
which the adjacent vertices of v correspond to. Step 1 
ensures that these bounds arc effective with N' as well. 

If V, on the other hand, corresponds to a variable y, then 
Step 1 ensures the following. If N' has a feasible solu- 
tion, then this solution can be extended to a solution of 
TT b^r assigning the value a^^ to y, where a-y is defined as; 

= max {L, a^ f- w^, + w^, . . . , aj^^ + w^ > 

assuming that the feasible solution of IT' assigns a^^ to p^. 
(Jj, w . ’ s and p. *s aro as defined before. If a p^ be a 

11 J 

constant c^then is, obviously, c itself), This extension 

J 

is possible because it can be seen that 1 i, a < U, and 

«/ 

also that the extended solution (v;ith y value fixed at a ) 

t/ 

will Satisfy the simple constraints involving the variable 
y. (These constraints axe .reflected in the (m + n) edges 
in IT which either originate from or terminate at Vy). 

If a number of vertices are to be deleted from a 
given netvrorlc H, then we do so by deleting the vertices 
one by one. Prom the above, it is also clear how a feasible 
solution of the resultant network can be extended to a fea- 
sible solution of the original network IT, 
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2.6 Reduced M etw o rk an d Remming o f Variables ; 

Reduc ed network irs an acyclic digraph obtained fion 
a constraint network by collapsing each strong component 
of the latter to a single vertex and then (by making appro- 
priate additions and deletions of vertices) ensuring that 
the resultant network contains only those vertices that 
correspond to the variables occurring in the final form 
of the aggregate equation. Me shall explain presently the 
notion of 'collapsing the strong components' and also tk 
what we raan by the final form of the aggregate equation. 

The information that is there in a constraint net- 
work that satisfies the necessary condition of Section 2.5» 
is essentially captured in its reduced netwoifc along with 
a loweaibound and an uppei-k)ound infonnation for each vari- 
able, These bounds get defined in the process of obtaining 
the reduced network. In this way, the feasibilitv of a 
simple constraint set is reduced to the feasibility of the 
constraints reflected in the reduced network along with 
the lower and upperbound constraints of each variable. 2 
This reduction is useful because the acyclic nature of the 
reduced network makes it easy to be used for pruning the 
solution space while using a backtrack procedure to solve 
the aggregate equation, as we shall see later, 

V/e build the reduced network from a constraint 
network only after the latter is found to satisfy the 
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necessary condition of Section 2.5, If v and v be two 

X y 

vertices in the sams strong component of such a network, 
then we know there is a path from v to v and vice-versa, 
each comprised only of zero-weighted edges. Therefore, 

X < y and y i x which in turn imply that x = y. We can 
then simplify the situation by substituting everywhere x 
for y or vice-versa. Collapsing of strong components 
achieves this simplification. 

t } " 

By collapsing, we mean the following. For a strong 
component that has only one vertex, we have to do nothing. 
For a strong component C, that has two or more vertices, 
all the vertices belonging to C and the edges to and from 
these vertices, are removed from the network. Instead, a 
new vertex is incorporated to replace C. Then, edges are 
added so that there will be an edge with -•^aight w from 
(or, to) the new vertex to (or, from) one of vertices, v , 
remaining in the network iff one of the edges removed was 
from (or to) nny one of the vertices belonging to C to 
(or from) the vertex v , and the edge had the weight w. 

Jr 

In this process, if multiple edges result between two 
vertices, only that edge is retained which has the largest 
weight. 

We can see that by collapsing ^ a strong. component 
having more than one vertex we are substituting a variable 
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or constant occurring in tlio strong component for the other 
variables of that strong component. The name of the nex; 
vertex that replaces a strong con^jonent is guided » then* 
to achieve maximum simplification. Therefore, whenever a 
constant can replace a varirblo, we do so. Otherwise, as 
ultimately we will want the reduced netwoifc to have only 
those variables that occur in the aggregate equation, we 
take the latter in account for naming the vertex Ihat 
replaces a strong component. From these considerations 
WQ liavo the following two rules for this naming. 

r 

Iht le 1; If the strong component C contained a vertex v , 

c 

where c is a constant, then the new vertex that replaces 
C will be Vq. (There can be no ambiguity as the same strong 
component of a notX'J’ork satin f 3 ’’ing the necessary condition 
of Section 2.3 cannot contain two vertices corresponding 
to two constants). 

V/hen the above rule is not applicable, then the 
name of "the now vertex will "bo v such that v had occurrred 

X X 

in the strong component and x is a variable that occurs in 
the aggregate equation. In case more than one such vertex 
name is available^ then any cne of them may be used. 

If, on the other hand, none of the vertices of the 
strong component corresponds to a variable occurring in the 
aggregate equation, then the new vertex name can bo any one 
of the vertices in the' collapsed strong cos^onent. 
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The simplification that has been achievod by collaps- 
ing the strong component c lias to bo done for the aggregate 

equation as well. Thus, vdion n vortices, v , v , ...» v 

?! P2 Pn 

of a strong component arc collapsed to a sin^c vertex v_ , 
then in the aggregate equation, p. is substituted for 

J 

Pl» Pp» • • • f 

An acyclic digraph is obtained from a constraint 
network by collapsing its strong components one by one. 

Along with the collapsings, the corresponding simplifica- 
tion of the aggregate eou^tien is carried out. The aggre- 
gate equation that results at the end of these simplifications 
is its final form. 


After collapsing of tlio strong components, to get the 
reduced network, we have to ensure that only vertices corres- 
ponding to the aggregate equation in the final form occurs 

in the network. To do so, wo may need to delete vortices, 

'U 

and/ deletion process, as wo have seen, needs an absolute 

’ i 

upperbound and an absolute lowerbound defined for each 

variable. Therefore, for every variable x, wo initialize 
its absolute loi/orbound 1^ to zero and its absolute upper/- 
bound to 1he uppe^ound supplied with the problem instance, 
Moxt, we delete from the constraint network all those 
vortices that correspond to constants. Then from the result- 
ing network, al-l those vertices are deleted which correspond 
to those variables that do not occur in the final form of 
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the aggregate ecuation, Tinally, we add vertices corres- 
ponding to those variaMec ir?\ich occur in the final form 
of the aggregate eouation hut not in the network, Rosulting 
network is our reduced network. 

We can sumnarizc the process of obtaining the 
reduced nct'/ork f i om a constraint nctxirork that satisfies 
tho necessary condition of Section 2.3, in terms of tho 
folloTiTing four stops. 

Stpp_l: Each strong component of the constraint network is 
collapsed to a single vertex. 

r 

Step_2" The aggregate er!ur::ion is put to its final foim 

by carrying out sinplific. tions implied by the collapsings, 

; 

5tpp_^j For each variable, an absolute loworbound and an 
absolute upporbound are defined, 

-^t.ep 4 ’ Appropriate deletion and addition of vertices are 
made so that the resulting network contains only those vorti 
ces that correspond to variables in the aggreg-'.te equation 
in the final form. 

It is to be emphasi^^fed that a sot of simple cons- 
traints is feasible iff the derived reduced network along 
with its absolute bounds on variables is feasible. This 
is because, in brief: 
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(a) The addr^d vertices in the process of building the 
roducod network ar". all isolated, hence they do not affect 
the feasibility. 

(b) The deletion process is such that (as wo have seen 
in Section 2,5)» all the necessary infonnation pertaininj^ 
feasibility is retained. IToxt, wo discuss a necessary 
renaming of variables. 

To do so, lot us dofino a relation, among the 
vortices of a reduced nctvrork in tho following way: 

v v iff there is a path from v^ to v^ 

in the reduced network. 

Clearly the relation is reflexive and transitive. 

r 

It is also anti -^symmetric b'-cause a reduced network is 
acyclic. Therefore the relation imposes a partial order 
among tho variables. 

Wo can topologically sox-t tho sut of vortices using 
this partial order. If there is a path from v to v in 

P H 

tho reduced network then in the sorted list v will precede 

Jr 

V . (A very efficient algorithm for topological sorting is 

given in Knuth (1963)). ' Topological sort number of a 

r 

vertex is its position in the sorted list and therefore^ 
each vortex will be associated with this number vhich will 
range from 1 to m \dierc m is tho total number of variables 
in the reduced network (and therefore, in tho aggregate 
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equation). Tho renaming of vriablcs that we now carry out 
is as follows; 

vert o x V ha^s th^ topological sort number 

ir 

t, thpll the P Is. r.ename_d as x.^.. 

In both the roducod network and in the aggregate 
oouation, variables arc substituted with their new names. 
The aggregate ocuation now is> 

If til ere is a path fron v^ to in tho prosont 

^i 

reduced network, then necessarily i < j. 

Every reference to a variable ^'ill be in terms of 
its new name from hero on, 'io shall sec these now names 
plaj’’ an important role in our algorithm. 

lIpto_: Eor easy reference, and not 'lxj,» will d-;notc the 

absolute lowerbound of x . . Dimilarly, u.. will denote the 

j X X 

absolute upperbound of x^. 

Pig, 2,3 shows the reduced network corresponding to 
tho example considered in Section 2,2, along with the 
absolute bounds of tho varia.blcs and thoir ne^^ names. The 
parent constraint network is shown in Pig, 2,t and the 
aggregate equation is given by equation (3) in Sec. 2,4. 

^’/c note, V , V and v form the only strong component of 

"“•SI 

the constraint network that has more than one vertex. Those 
are collapsed to v in the roducod notwoifc. Vortices 

A 
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corresponding to two constants, namelj^ 1 and 4, and the 
vertex Vp had to be deleted (variable p does not occur 
in the aggregate equation) j vdiile vertices corresponding 
to s and y' had to be added. 

Pig, 2,3 also shows the aggregate equation with 
the new names for the variables. 


V 



Reduced Network with 
old names 


Old name s y' x z w 

jFow name x^ Xp x^ x^ Xj. 

Absolute 

uppenbound 9 9499 

Absolute 

lowci*bound 0 0 0 0 3 


The aggregate equation with the new names for the 
variables is; 

llx^ + llXp + 40x:j -I- 35x^ + I4x^ = 136 

Pig, 2,3; Reduced netwoxh, absolute bounds of the 
variables, their new names and aggregate 
equation with •thede names for the 
example in Sec, 2,2. 

2 ^ Consistent Ass ignmencs an d Low ei ^ounds ; 

Our algorithm to solve the integer feasibility problem 
has two distinct phases. The first phase is preparing for 
the backtrack procedure and the second phase is the back- 
track procedure itself, V/hat we have described so far is the 
preparation, namely deriving the reduced network along with 
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absolute lower and uppeilbounds, getting -Bie aggregate 
equation, and the renaming of variables. This completes 
the first phase, Certai ’. ide^s have to be developed, 
however, before we can discuss the backtrack procedure. 
Consistent assignments and their lowei^bounds are two such 
id eas , 

Let us assume that the aggregate equation has m 
variables, therefore these variables are (due to renaming) 

^1' ^2* "the backtrack procedure values 

arc assigned to variable in the ord.'r x^, X 2 , ..., 

(Why it is done this way, will bo clear later). An §j.^sigu- 
men t then can be represented by just a vector of values 
(val 2 ,val 2 , ••• , with the implicit assumption that 

value valj_ is assigned to for 1 1 i <. m, A part ial 
LpraryJ. assignment is a p-ary vector, (val^ j val 2 , ••• , 

1 - P i which assigns val^ to x^ for 1 1 i 1 p. (An assign- 
ment is therefore also a partial assignment). 

A partial assignmait A 2 is an ext e nsion of another 
partial assignment A^^if A.p is obtained by augmenting A^^ 
with one or more comnonertn. Thus, if A-j^ is p-ary, then 
the first p components of A^^ and A 2 are identical. 

An edge in a reduced network, as in its parent 
constraint notv^ork, reflects a constraint. However, as 
the reduced network contains vertices corresponding only 
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to variablos, an edgo in it always relates two variables 

by such a constraint, (For an odge with a weight w from 

V "fco V , the roflectcf’ constraint is x. > x. + w), VJe 
Xi Xj 3—1 

say that an assignment sati^^^es^ a r cduc od net work if all 


the constraints reflected in the rcduc ed- network edges 
are satisfied by the assignment. 


Me recall that in the process of building a reduced 
network, an absolute lowei^oimd 1^ and an absolute upperA 
bound u^ become defined for each variable An assign- 
ment (val-|^,val^ , ••• . satisfy the absolute 

loweifbounds if, for each ij 1 i i £ m, 1 ^ £ ^^i* Similarly 

if for each i, v?’l^ u^^, then the assignment satisfies the; 

/ 

absolute uppcr\)ounda . 

A partial assignment A3 is called coMist^i if an 
assignment A2 can bo found which is an extension of A3_ such 
tliat Ag satisfies both the rv^duced network and the abso- 
lute lower^bounds. 


This notion of consistency is important because of 
the following reason. The backtrack routine (to solve the 
aggregate equation) needs to consider only consistent 
partial assignment for extension to a solution. An 
inconsistent partial assignmait violates at least one 
constraint reflected in the reduced network or violates 
an absolute lowei^bound, therefore it can never be extended 
to a feasible solution of the entire problem instance. 
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Given a coiisi stent partial assignment, there can ho 
many (in fact, infinite) irays to extend it to satisfy the 
reduced network and the absolute lowerbounds. One of those 

I 

deserves special attention for it defines what wo call 
loworjboundslfor the partial assignment. The definition 
of loweijbounds are as follows. 


Por a given consistent (partial) p~ary assignment 
(val-j_,vr.'lp ^ P 1^- ^ P ^ 0 1 

ic! called the set of lox/erbounds if 

1. (valj^, valp .... 

is an assignment that satisfies both the reduced 
network pnd the absolute lowerbounds, and 

2. Po extension of the given partial, consist (ait 
assignment can satisfy both the reduced network 
and the absolute lowerbounds if the j-th component 
of the extend 'd assignment, for any j, p < j <m, 
is less than £b.. 

J 


In other words, every assignment that satisfies the 

\ 

reduced network and the lowerbounds together, and is an 
extension of the partial consistent^ assignment will have 
in its j-th component, j ^ p, a value which is greater than 
or equal to lb.. Hence, the name lowerbounds is for Ib.'f:. 

J J 

1 to bo distinguished from absolute lowerbounds. 
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The uniqueness of the set of lowerbounds for a 
given partial consistent assignment is clear from the 
definition but the existence of such a set of values is 
not. This we show by the following construction. 


let the given partial consistent assignment be 
(vpl-j^^valp , valp). If p = m, then the empty set is 
the set of lowerbounds which satisfies the definition 
vacuously. Therefoie, let us assume p < m, and let 
be constructed in the following way. 


Stpj)^jL; Construct the set using the following three 

rules : 

Rule 1; is en element of S„,t, 

p+l p-i-± 

(As before, is the absolute lowerbound 

Rule 2; If there be an edge in the reduced network from 

w with a weight w, then (val - + w) 

j p+i ^ 

belongs to 

(We note, because of the acyclic nature of the 
reduced network and the topological sorting derived 
ronaming of variables, j has to be less than p+l 
and therefore val., is defined^ 

Rul e 3i No other element belongs to 
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SlqE.2: is set equal to the largost element in 

(Thin step is for obtaining subsequent loweifbounds) , 
valp^ 2 _ is set equal to , 


This way we construct ^bp_|_^. How that valp_j_|j_ is 
defined in the process, wo can construct 

other Xb.'s in the same wa-'’- iteratively. 

J 


Ho have to now sh.oTr that the Ib.'s constructed this 

J 

way are indeed the lowei*bounda for (val-, val 2 ...., val ). 

To do no we h'^ve to dej^onstrote fo"" the assignment 

(val^ val^ ... valp ^^p 4.2 following: 

(a) That it satisfies each absolute lowerbound ^ i,'3, , 

1 JE Pj else 

(b) that it satisfies the reduced network, and 

(c) that any assignment which is an extension of 
(valj^, val 2 > ..., ^rJ-p) and has in its i-th compo- 
nent a value loss than ^h^, p < i <_ m, will not 
satisfy botii the reduced network and the absolute 
loweij^bounds together. 

For (a) above, when t <_ p, then surely ^ 
otherwise (val^, , valp) would not be consistent. And for 
any t, p < t ^m, mlc 1 in Step 1, and Step 2 ensure that 

h i 
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Tor (b) above, we lir.ve to i^ow the constraint 
reflected in each edge of the reduced network is satisfied 
by the assignment (val-j_, val 2 , ••• -* * * ' 

One way to examine each edge in a digraph is by considering 
each vertex in turn and oxc'j.iining those edges which termi- 
nate at that vertex. This is what we do for the reduced 
network edges. First, let ua consider a vertex in the 

reduced network, say v , for 1 < i < p. If there be an 

^i ” 

edge from v^ that .i < i and therefore . 

valj nnd val^ ar.‘ components of the consistent partial 
assignment wo started with. These two values determine 
whether the constraint reflected in the edge from v_ to 
is satisfied or not, }3ut it must be satisfied else 
the partial assignment vrill not be consistent. 

For any i, ra >_ i > p, let us consider v in the 

*i 

reduced network. In the construction of Ib^, for such 

a vertex, we explicitly satisfy the constraint reflected 

in each edge that terminates at v (by choosing the 

^i 

largest in Step 2 of the construction). This demonstrates 
(b) above. 


To prove condition (c), wc can prove inductively that 
each lb . . is constructed in such a way that there can be 

p+i 

no extension of (val 2 ^,val 2 » •••» val^) which will satisfy 
both absolute lowcrbounds and the reduced network and yet 


have a (p+i)-th component xfliidi is less than The 
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induction is on i. For base, i = 1, the construction 
clearly rendering the above assertion true. 


J'Text lot us assume tliat each for some i < ra, 

is indeed the lowerlsouiid of for the given consistent 

partial assignment. Further^ let us assume that the cons- 
tructed is greater than the absolute lowerbound 

^p+i+1 (o'therwiso, clearly = ^p+i+i» extended 

solution with (p + i + l)-th component less than 
will not satisfy this particular lowci‘bound) . Therefore, 
from the construction of , wo know that there exists an 

edge from some v to v with a weight w, and that 

^p+i'!-l 

•’•^p '-i+l = wi^ere t = val^ if d i P else t = Ib^, 

Assivning the latter case, i.e,, p > j, (the other case, can be 
considered in a similar foshion), wo knovr from the induction 
hypotJiecis th<-'.t lb. is the least value that cnji bo assigned 

ti 

to X. (ill ord'.r to satisfy the reduced network and the 
J 

absolute loweijbounds) . Therefore, to satisfy the constraint 

reflected in Ihe edge from v_ to v , the least value 

^+i+l 

that can be assigned to is 'Ibj + w as the constraint 

is ^ Xj + w. Clearly then, we cannot assign 

a value loss than (which equals Ib^ + w) in an exten- 
sion of the p-ary partial vector (val 2 ^^val 2 ) ^^p^ 

that will solve the reduced network. This proves the 
induction step. 
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The above discussion may be treated as the proof 
of the following lemma. 

lemma 2 , 2 ; Given a p-ary^ consisten-^ partial assignment 
(val^^val^^ valp), called. Say A-j^, we can find an 

assignment, Aj,» (val2,val2^ .... ^^p+1, ^^p+2 , • * • , 

i.o, kp is an m-ary extension of A^^, such that 

a) Ag satisfies both absolute lowefbounds and the 
reduced network. 

b) Any assignment, A^, vrhich is an extension of A^ and 
\;hich satisfies both absolute lowerbounds and the 
reduced network \ri.ll bo such that the j-th component 
of A-, for j > p, will be greater than or equal to 
ib... 

J 

(Each lb., j > p is called the lowe rbound of x. corros pond.ing 

J J 

or for. A-j^. The number of vertices in the reduced network 
is given by m). 

We note from the construction to obtain Ib^'s that 
if we had started with a larger value of valp, then the 
'lbp_|^^ that wo would obtain would be greater liian or equal 
to -Uio •ibp^lj^ obtained for •the present value of valp. V/e 
con see inductively that similar would be the case for 
other loweiibounds as well. This leads us to -the following 
lemma: 
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Lemma 2.3; Lot A and B to txro p-ary consistent partial 
assignments which are identical except for the p-th compo- 
nents, Let the p-th component of A be greater than or 
eeual to that of B,. Then, if Ib^ and Ib^ >c the lower- 
bounds of x^ corresponding to A and B respectively, wo 
have, 

1 ib^ , fo?: i, p < i 1 m, 

I'Tcxt, as we have seen from Lemma 2.2, if (val^^j valg^f. 
,,^valp) is consistent thcii (val-|L ' •**- ^^p,^^p+l)** 
is an assignment that satisfies both the reduced network and 
the absolute lowcijibounds, Clonrly then, (val, , val«, . .•,val 

X C JJ 

2.bp^l) is also a consistent p^irtial assignment. Also, from 
the definition of loworbounds, no assignment which is an 
extension of this latter partial assignment and which satis- 
fies both the reduced network and the absolute lowei^bounds, 
can have, a value less thanAb. in its j-th component, 

J 

P+2 1 j 1 m. Thus, we have: 

Lemma 2. 4; Let Ib^ be the lowoi^bound of Xj|^, p < i <, m, 
corresponding to the consistent partial assignment (val^^’ 
val 2 , valp). Then, the partial assignment (val^ ,val 2 , •• 
.^valp^lbp_|_^) is also consistent and corresponding to this 
latter partial assignment, oach -ib^, p+1 < i £ m, is the 
loweiibound of x^^. 
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Now wo can state the following constructive defini- 
tion of consistent partial assignments: 

1. An anpty partial assignment is consistent, 

2. If (val 2 ^^val 2 ^ •** > consistent with p < m, 

then so is ( ve-l-j^^vil^ , 

vo.lp j^j^ ^ dTbp 1 ^^ , whe re 'Ibp^ is the lowerhound of 
corresponding to (val^^val^, •#, valp), 

A corollary of the above definition is the following: 

If (val 2 _,val 2 , valp) is a consistent partial 

assignment then so is (val^ val 2 , val^ ) where 

val' > val • 

P - P 

2,8 Ba cktra ck Routine Str ate gy; 

2,0,1 The B asic s; 

Given an input instance, which is a set of linear 
constraints, the backtrack loutinc comes into ploy only 
after, 

1) The aggregate equation is obtained, 

2) the reduced network is built and it is ensured, 

(after suitable changes) that the final form of 
aggregp.te eaua.tion and the reduced network both have 
the same set of variables, and 

5) The common set of variables in the aggregate equation 
and in the reduced network are renamed as a result 
of the topological sorting of the reduced network. 
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iloreovrjr, w:: rcc.-ill tl’ao th : process of ’ouildins 

•fcho reduced net>Torl-; we obtain, for each vr.riable n . , Its 

1 

absolute lo\rei|bound and its absolute uppeifbound 

::^ho reduced nctworl: toectner ^rith the absolute bounds 

captures all the inf o iriation contained in the simple cons-- 

traints. The a^dP^egato eouation equivalently represents 

the non-simple constraints. Therefore, the civen problem 

instance, at this point, is equivalently reduced to f indins 

an in-ary vector (val^ ^val2^ • . . . val^^^) such tliat when each 

x^, 1 <, i ,< m, {aosumins thero are m variables in the 

ascregate equation) is assisnod the value valj, 

m 


(a) "ho agererate eouation \ a., x. = b is satisfied 

i=l ^ 

( lach a^ is a positive integer), 

(b) The reduo cd network is satisfied, 
and (c) "!ach va.l^ s<atisfio"i the constraint 

1j < valj f. 

17c build this ni-ai^ vector, or tho o,SGigament in the 
te-.ininology defi?iod in the Lxsi: section, b:' means of back-- 
tracking. 


f 


■facktracking is a well-kno^.m computational pai\:.dign 
to sos,rch an entire solution space. Hero, tliis space is 
clearly the sot of rn-ary vectors drawn from •••» 

..., U 2 > X ...X {1^, Instead of trying 

out each element of the solution space, ono-by-one, as a 
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brute -force approach would suggest, a backtrack procedure 
conies to the solution by extending partial vectors, back- 
tracking when necossarj?'. In our case, the partial vectors 
are called partial assignments. 

!/hen we have a partial assignment of (n - 2) components, 
there are necessary and sufficient conditions which CcUi be 
used to see if the partial assignment can be extended to a ^ 
solution by adding two moro components. On the other hand, 
if a partial assignment has a length less tlian (m - 2), 
there are some necessary (but not sufficient) conditions 
which it must satisfy if it can be extended to a solution. 
Therefore, each such partial assignment is tested against 
these conditions. Fow, lot us su -pose that a partial assign- 
ment (val-j^^ val 2 , , . . , valp) , called A, p < n - 2, is found to 
satisfy these nocossa::^’' conditions. Then A is to be extended 
because it may lead to a solution. The extension is by add- 
ing one moro component, therefore the 

extended partial assignment is (valjL .valp ,,... val^ ,vr.lp^^). 

This is our new partial assignment w’lich is now to be tested 
For extension. 

Let us now consider the co,sc when the partial assign- 
ment has failed to satisfy all the jiocessaiy conditions. 

This implies that no extension of A can be a solution. 
Therefore, the backtrack routine ensures that i/ neither* A, 
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nor n.ny of it a extensions, will over bo considored subse- 
« ¥ 

quently. The next pnrtir.l assignment that will bo consi- 
dered by tho backtrack routine is obtained fron A by changing 
only its p-th component, 'i’hc new partial assignment, A'^thon 
is (valj ,val2^..., valp) , where val^ is changed to val^. 

Such arjA' may however, not exist because there is no 
valp loft as all valuos tloat val may bo substituted ;rith, 
have already been considered implicitly or e:Q)licitly. Vhat 
such a case implies is that tho partial assignment obtained 

by deleting the p-th component of A, tliat is, the assignment 

• ¥ 

(val]^ ,val2, . . . ^val^^U^) cannot bo extended to a solution and 
therefore failure of A, in such a case implies tho failure 
of (val-j^ ,val2 j. . . ^val^^^). Same rules for failure apply to 
this latter partial assignment too, that is, we try to 
obtain a partial assignment not yet considered by changing 
its last component which is here val , • This proccoo of 

p 

going to a partial assignment with one loss component is 
generally knoim as *to backtrack'. 

Clearlv, we casino t backtrack when tho failed partial 
assignment is 1 -ary. This implies the backtrack routine has 
failed to find a solution because it has nothing else to 
do. In such a case the routine exits recording its failure 
to find a solution. 
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2 ;G . 2 Chci PA’in,^ t o 5.^ IT q\7_ P artial As s i^JiRon, t . 


A backtrack routine slioultl, in gonoral, bo in z\ 
position to soarcli the ontiro solution space. In our 
routine this is ensured by folloTrin^ cortain protocols uhen 
UG novo from one partial assi/pnaont to another. Before vg 
discuss the protocols ixo dc.?ino for oach variable a 
value, incremont , which is a factor such that over')' value 
of Xp in a solution will bo a multiple (zero inclusive) of 
this factor, The factor cones about in the following vray. 

Let (vail vrlo . . . . , va.l ) be an assi^nmoat that 
satisfies tho aggrogo.to equation. Therefore, we have 


f a..val. = b-, 

i=l ^ ^ 


'n 


vr.lp 


P-1 

b - y a,, .val. 

i4l ^ ^ 


m 

i-p-:-l 


val^ • 


Because all aj_'s, valj_'r. and b are integers, we liavc that 
Up.valp is a multiple of g^whorc g is defined as; 

g = ged (b, a^, ap_j_, a-p^^p •••» aj^)* 

TTow, if it has boon ensured that g and a.^ do not have any 
common factor (by dividing out both sides of the aggregate 
with the groatost common factor between them) then, clos.rly, 
valp will have to bo a nuJLtiplo of g, Uo sot incromontp to 
this g, and in any solution the. value that is assigned to 
Sp will have to be a multiple (zero inclusive) of 
incromentp. 
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Now, we arc ready to state the protocols. 


rrot ocol 1 ; V.Tien extending ••• (vr.l^ , 

val2 ••• value of will be the 

siar.llcst multiple; of increnicntp,^^^ whicli is greater than or 

t 

equal to which is the lowoi^ound of corresponding 

to the partial assignment (val^^ val2 . . . . . val^) . 

{Vc liavo seer that loworbounds in our definition taro 


ncaningful only when they correspond to a consistjDnt partial 
assignment. Me shall see presently that every partial assign- 
ment consificx'od b3’' the backtrack routine will be consistent). 


PrptpjspX A*. ‘^lon obtaining a new p-aiy partial assignment 
(valj^ ya-lp . val,!j) by changing only the p-th coriponont, 
vaJ-p, of another (previously conoid jred) p-a.^^ pp.rtial .assign* 
mont ( val^, val^ , • . • . v,al^^) , vr.l^ is rc la.tod to val,^ in the 
followin.g ^^ay: 

val^ = licrcncntp 

Prp Aoppl vor3r first partia .1 assignment that is consi- 

dcrod by the backtrack routine in the 1 -ary assignment 

(valj_)^ 

whore valu^ is the smallest nultiplc of incronont^ which is 
greater than or equal to 

I'o can SCO inductively, that over;’' partial assignment 

which is tested against the necessary conditioned- is a 
1 To be discussed in the next subsection. 
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consistent assisnmont. This follo\ra frrom the hr,so that 
the first assi/^af'nt to be tested is consistent (protocol 3 
r.nd the constructive def initio:! of consistent assiennent 
Civon at tho end of Section 2,7). The induction step follo!;s 
ulion wo apply tho constructive definition of consistenej'' 
when considering protocol 1, and the corollary of tho same 
definition when considerinj protocol 2, 


•'Vnothor inportant consorucncc of the ni.-’otocols is 
that tho value tlnat in assigned to variable in a partial 
assignment in a nultiplo (zero inclnsivo) of incromentp. 
This is onsurod by protocols 1 and 3 while initializing a 
ve.riablc and by protocol 2 wh.ilo updating it. 


Lot us now sec the effect of those protocols, IJhcn 
wc want to extend a partial assignment A of length p by 
one component, wo need not consider a value for Xp^l Whicl! 
will be less than/lbp,_^, the lowoi^bound of 
because such an extension will not satisfy at least one of 
tho siraplo constraints (Lomma. 2,2), Also, we hav^- soon 
that in any solution the vrJ.uo of ^ irltiplc 

of incroncntp_^ 2 » protocols a,rc such, that the lowest 

value that will bo tried out for 3!^+2. extend A will tales 
care of tho above two restrictions. Then this value is 
incrop,ocd in smallest possible increments (with increment 
in mind). This incroa,so is carried on till tho absolute 




y 
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uppo:|bound of is I’caclicd (as wo shall see later). 

This \To.:r the protocols ensure that every one-component 
extension of A, thr.t may lead to a solution, is considered 
by the backtrack routine, Ilorcover, ouing to protocol 3, the 
backtrack routine uill start uith a one- component partial 
assignment fixed at the louost pcrnissiblo vr.luc. It can 
bo seen, then, that the protocols jiioure the capvability of 
the backtrack routine to examine every partial assignment 
that may load to a solution. 


2.0,3 ITocj. ssa_ry_ Conditions^ _f pjr IJprfc ension : 

'.'o hav^ mentioned that ovv.ry partis,! assignmunt ^/hich 
can bo oxb ended to a solution must .uocossarily satiGf 3 ’‘ 
certain conditions. Jhoro are three suc'i conditions vhich 
are explained bclOTr in tho context of some x^urtial assign- • 
mont jV.alj,). 


val^ ^ u^ , for each i, 1 f, i < p, 

(he roca,ll that u^^ is the absolute uppoi^ound 
x^ and therefore, the condition follows inmodiatoly, 
part-ial assignment that is considered foi' r-xtonnion 
consist ont, thoreforo val^ “ ^i » ^i absolute 

louesibound of x., honce we nood not chock if val. 

j ■ ^ 

the absolute lovroiibound ) , 


O'? 

J.v •'ly 
iij 

satisfies 
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P 

"■'Ct c b:; oriual to J a. .vrJ... 

i=l ^ 

Thou gcd ''^p+2» •••» divide (h~c) 

(h'o r icrll that tho aggrugato opuation is 
U 

I a. .X. = b). 

■1 

1=1 

This condition comoc about in tho foUovdiig uajs 
uhcii the (partial) assignment is made to x^ througli x.^, the 
aggregate or^uation is simplified to 
n 

I a..x. = b *• c . 

i>p ^ -- 


If (val],val2, 
then tho above? 
uhic’.j in. turn 


, ..,val ) can ho cxtor.dcci to a solution 

It 

conation nill liavc an integer solution 
implioc tb.at gcd of the coefficients of 


f 


f 


a through a. uill divide the right-liand side (h-c). 

.lied, ^cjiqcl: ■'.re aha,ll refer to the checking of this 

condition. 


Vopospp.Tj^ Condition ^ ; 



“i- 


m 

d 


+1 


^'i'^'^i 


vhoro-lbj^’s aro the loworbounds corresponding to tho 


partial assignnont (va-l^^ val 2 . . . .vr-l^) . (Those- lowcrboards 
exist bocauso every partial assignment that is considorod 
for extension will bo as v/c have scon, consistent). 
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This condition corioa nbout in tiic follouini^- ur.y.Lut 
( val^, vnl2 , . • . , val^ )'bo ouch tlmt it cr.n be extended to 
, solution, in uliicli goto the vi->luc x^! for p < i <_ u. 


Thon VTc knox; thr,t 


,7h < 


for n < i 5 n 
or> x^! for p <i <_ n 

ns onch is positive. 


Therefore, 


f n 

n^.-lb^. < I n. .xl . 

i=p-:-l - ^ “ i=p^a ^ ^ 


(1) 


Also, no th'.! solution uill nloo solve the nggrcgr.t ' equation, 
\TO havG, 


F V 

; a^.val^ + I 


i=l 


i='o+l 


’i* ^i = ^ • 


(2) 


Prora (l) and (2) above, the noccssarj'’ condition 3 
follouD. 


The 


ciiocliing 


of this condition vill be roforrod to 


as the 


by tho 


('-'c note 
f-'ct that 


the crucial roT.c played in this condition 
each in tho .aggrogato equation is 


positive ) , 


Fext, lot us SCO uhat it racaus (.apart from the 
iniposaibilit3'’ of it to be extended to a solution) vzhon a 
partial assignment fails the conditions. 
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Lc't uc conoif'cr c. partir.! aasisnmcnt ( val^ val, . . . . 
val^)* If "^‘^p fiTcauCr tliaii the absolute uppcvbound, 

UG mat backtraci: bocauac, obvioucl”-, (vr.l + inc->’o:iont ) 

^ ' p p' 

^/ill also fail condition 1, 

If (valj^ vnl 2 ^...,vn-lp) fails tho ged chock, it clops 
not impl 3 ’' that (vr.lT valp ... val + increnont ) will also fail 
tbr; ged ciiock, and therefore, this is the now partial arj.oig]''.- 
m :nt tbo.t is to bo considorod for erfconsion. 

On tho other hand, let us cupposo that (val-j^ 
vr.l ) fails the loworbound chock. Again then, vro have to 

sr 

backtrack, bocausc if wo donot, then of the p-ary assigjiwonts 

vliic'x can bo obtained by changing the p-th componen'; of this 

partial ascigiuncnt, those which are left to bo considorod 

will be (val-, , val^ , val') where val* is greater than 

VP.! , ITow from Jicma 2,^. wo knoTr thr’.t the lowoi^ound of 
P 

X . , for each i > p, corresponding to (val-, ,.,,val^) will be 
greater than o?* equal to the lowei-^bound of corrospoiiuing 
to ( val-j^ ^ valp , • . • . valp ) « Therefore, ( val^ , valp .... val^ ) 
will also fail the loworbound chock, compelling us to 
backtrack from (val^ ^valp,.,. ,val,^). 

Though applicable, we do not apply those necessary 
conditions when tho partial assignment has (n-2) components. 

As we shall see in Section 2,15, for ouch a partial assign- 
ment, wo have a set of necessary aiid sufficient conditions 
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to decide if "tlio partial assignment can be extended to a 
solution. Based on this sot of conditions, uo have a 
scparp.te routine which is called by the b.ac’ ;tracl: routine 
when an (ni-2) component pv-.X’tial assignment is reached, 
ihe fo:aiiC'r routine then decides if the partial assignment 
can be Ecxtondod to p. solution paid if so, the i-outinc 
g-incrates the (n-l)-th and the n-th conpenonts of a solu- 

v_ 

tion irhich is an ertension of the (iii“2)-p,ry p.artip-1 assign- 
noiit, If^ an the other iiand r solu!;ion is not found then 
ue try othijr (m-P)~''.r37' np.rtial a,soi:piments b.jr increnenting 
the (m-2)-th conponoiit till the a'' solute uppoi^ound for 
reached. If p. solutf.on is yet to be found, then 
ire b '.cktrach, 

2, 9 p_b tp,i_ning_ T'pi/qr. pyaidn^ arj JJpdat ii^^ _ _ 

b'o Ixav;. soon tho/b ov.-.oy time the baclrtrack routine 
considers a partial assi-gnment ( vp.!, ^ val^ . val ) for exten- 
Sion, it nooda the loirorbound of o.'.ch p < i _< m, corres- 

ponding to this partial assignment, Vor, lowcrbounds p.re 
rociuirod to perforin the 3.o'r -rboiuid checl-;; a chec].: that 
must be passed by a pp.rtial taosigiu.ienc before it Euay be 
extended. Therefore, obtaining loworbounds corresponding 
■fco a given partial p,ooignmcnt is a very frequcnt _ta.sk. 
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and lioncc Dhould bo accomplicliod as fast as possible.^ 

To obtain tlic lovrcrboundc corresponding to i given 
partia.1 acGigiimcnt, vtc could uco tlic construction that \ras 
given in Section 2,7 to show the existence of lovorboundc. 
Howovor, tho context in irliich \ro i;ant tlio loucrbounds 
sugj.csts far better approach to obtain thoi. This approach 
is t j obtain tho loworbcuncls corrcspMiding to a partial 
assignment by updating the lo^roi^o-inds of a previous lj>^ 
considered partial aSGi;jnKicnt. Such appro.',cli to calcu- 
lating lowci^oouncls is based on tho fact c^q^resBcd in the 

i 

following Icmna: 


Ticnna 2,7", In tho execution of the bacbtrach routine, a 
partial assigiincnt (val^ ^ ^val,^ ) called, nay, A 

is considered for oxtennion onV' after obtaining tho lower- 
bounds corresponding to anot]\i:r parti"' 1 aGsignnent (val^. ... 
. .^ ve.lp^^^ valp) called, na'''’. A' in irhic]i val^'^ <. val^» i/ith 
the exception when A is tho first partial assignment consi- 
dered (i.o, tho one given in j'r'otocol ;>). 


fi’ppfp UnlcGS A is the first partia.l assignment, it is 
considered for oxtenoion provided on.o and onlj*' one of the 
following CS.SOS hold; 

1 Other txro nocesoary conuitif^ns have inexpensive chechin 
for ged chccl:, relevant pod's can bo pro computed and fo 
tho first necessary condition, all \io hav- to onGurre is 
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Cr.£L 9 ,ik‘ pr'.i-tio.l r.S3ic;j.inait Trhich ic {vrxl^.vnl 2 . ... 

..veil t) ^^eio fouiitl to 3 p,tirjf 3 '- the nccooorLiy contlitioiio for 
oxtonoion and oo A vc.u obtained hj'’ extending A^. 

Case .2; A partial asoi^imont A 2 to.g found not to satisfy 
the necessary conditions for oxtonsioii, so its last compo- 
nent was chan^od to obtain A. 


C^s_c p: "vor"'’’ sinslc-ccnponcnt extension of a partial 
assi^ment A^ was found not to satisfy the noccssaiy 
conditions for oxtonsion. 3o, after backtrachin". the 
last couponent of A^ was changed to obtain A, 

x’horoforo, wo consid-.r A for extension onl]?’ after 

i 

having computed the loworbounds corrospondiiig to in Case 1, 
Ao ir. Case 2 and A- in Case 3. '..hen, 


I 

f or_Cr.pp_ 1_: Jrct db^ be the lowci-feound of co-’rosponding 
to Aj^ for oac]i i, p < i ei. ITow the p-arj' partial assign- 
nont (val^^ . . .^ val^_^ db^) called A^ , is also a cor-Sistont 
assignment, iloroovor, from Lemma. 2,4 » Ib^ is the loworbound 
of Xj_ corresponding to A^^ for each i, p < i 5 , n, fhorofore, 
when A is considered for extension, lowcrbcunds of A^ arc 
ali'oady computed. Ilorcover, from Protocol 1, lb <_ va.l • 

oT Jr 

Thus, A^ here is tho A' of the lemma. 
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■rp r. pApcpL Protocol 2 

lowoiibounds corrcapondlii/: to i"i C 

/ 

arc conputcd boxoro A is coiicidorod 
conc3.udo that A' of tlic lemma is Ap 


and tho fact that- 
asc 2 and A^ in Cas^ 
for extension, we can 
in Case 2 and Ar^ in 




Cane 3. 


f'ho import of thin lemma in that, .after a proper 
initializ.atio'/i, pJ.l lonoPuouncl computations required by 
tlio bachtraeJe routine can bo o.cc im/olinhod by updatin/j the 
air a cly conputcd loucr'bomidn correspond in ^<5 bo a po.rti.al 
assift’nmont cpucificd in the lomna, Po porfor' tJiis updating, 
ue can uoo tJio following algoritlui. 


i’he algor it’ m asounos tliot for cr eh i, p < i m, 

/Ih^ is the lovrorbound of corr< sponding to A' which 
is ( val-j^^ va3.p \'a,l,!^) . '.'he algorithm updo-tes tlios.; lovrer- 

bounds to correspond to A wliich is obtadned by cheoiging 
oulj^ tho P“th conponen b of A' to val^, whero * v.al.^. 


Let S be a set to store variables 


Ippjo 

find tho in S which has tho smr.llcnt subocriptj 

I 

S: = S ~ , 

= if i = P ■'^p 
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ox- uach odgc o in Liiu reduced nct\:or’: 

froa v„ to cone v , v is the wcifjht of c 
-1 '"j 

dp^ 

nv.iJvrJ.; = t + u 

if ncuv.\l > lb.. 

D 

tlicn. Abj : = nowal » S: = s| /{3Cj> 

» 

od 

until S ist empty, 

'!q note that tho toriination of tlio above alcoritun 
ic c'-^ar.ant ood because tho reduced notuorh is acyclic. 

If uo denote by Ib^ the updated value of Ib^, uo 
can SCO from tho rj.a'oritlrij'i that 'Ib^ .> Ib^ , for: p < i < n. 
'■-’his is ao it should be bcco.usc of J.c.ina 2,3, As Ibis, by 

f 1 

dv..finition,. satiefj'’ the absjlutc lo^'crbound, so tr.ill then 
ibi ’c. That is uhy uc do not chock for tlie satisfiabilit''' 

t' 

of abs.olutc lovrorbounrls in the above al£;orithm, 

Durins the execution of tho algorithm, S is ncant to 

i 

store those variables, lou<..r.^boundG of wliich arc bnoim to 
have increased, but tho effect of the increase is yot to 
be taken care of, V/o can see tliat louerbound of o, vtii’iable 
may bo increased sevoro-l tines till it stabilises to a 
certain value. ITov, at a ccrtaiii point in the execution, if 
x^ happens to bo the vca'ir.blc with least siibscript value 
amonc tho current nonbors of S, thou for all Xj|^, i < q. 
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cither i 


fixed at val^ (uhon i 5. p) or itn 

j - 

lowoI^■bound lias otahiliz. id, (Othcinriso Xj. vould bo in S and 


then would not be tlic lowofit subscripted vr.riablc anon.-^st 

the monbors of 3 at th-at time). Ifow, if tlioro is an edge 

from to , then the present loworbound of lias' boon 

arrived at after ensuring tliat the constraint reflected in 

tho edge is satisfied, 'fhcroforc, at tli:,t 2 ioint in the 

execution, the algorithm dolotos x from 3 and then examines 

all the edges pri^iiia_ting to make sure that th^ 

constra.ints reflected i:i those edges arc satisfiod, This is 

.acconnlishod Iw incre.asing tlie lowaibounds of tJioso x.'s, 

^ J 

1 /horc there is an edge from v to v and thoir present 

j 

lowoi^rundc do not satisfy the constraint roflectod in that 
edge, Tj take cane of such increases in lowcrbounds, 3 
irill now be updated with near rnsibcrs, howevor, becauso of 
the acyclic nntur.r of tho reduced nctwoif:, there can bo no 
path from the presont members of 3 to x^^, and therefore, 
further oxccution of the algorithm irill not cliange tho 

f I 

lowor^bound of x^. This wag’’, the loirorbound of a va.riablo 


stabi.liacs to a corta.in value. 


Tho way the algorithm considers all odgee of tho 

reduced network is by considering, implicitly or ‘explicitly , 

edges originating from each vertex. If the loworbound of a 

variable x^^ is not increased then tho constraints rofloctod 

in tho edges from v_ will continue to be satisfiod, 

^i 
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■bocr.uso if cucli an odgo tcrninatoc on , tho updatiiog of 
lb. can onlj^ increase, the v,aluc of lb.. "'’lius» by ignoring 

J J 

such vertices as v,. , 'liiG ^ilgorithn is implicitly considei’- 

■“■i 

ing the edges originating from then, 

i < 

In updating of a loucrbound, the increase i:i its 
value tjiat is nado at a time is tbo .lininun possiblo, 

30 tliat an increase less than that ■\;ill violate a.t lo.ast 
one of the constraints reflected in the edges of the reduced 
notuorh, 

The above is a sketch of a proof that the alg 7rit!ii.i 
correctly upd ^tes the louorbounds, 

2 , 10 npiovT-iit^ ji>,ta_^ 

I’o use updating for D.oucrbound cemputatiens, uo need 
to remember the lovrcjbounds corrospondi::ig to proviouslj'’ 
considered partial .o.scignm snt, This parti, 'il assignment 
has been c’raracti.-rized in the proof of lenma 2,?, h'o see 
bolou that .'’J.l vre need is an n :: n matrix (m^ as before, is 
the number of vari.ablos in the final aggregate oquatijn) 
to store the lowci'beand results corresponding to the 
relevant prcviously-concidcrod partial .assignments. Lot 
LBAV be the matrix (for Louci^boundo and Assigned Values). The 
definition of LBAV follows. 
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ct the pr.rt ial n,GGiGii!ncnt ( val^ ,•••■> ^ . vp,!. ^ ) 


cnllod^ DJiy A, ir: to hr. tooted ogr.innt tho nccocso.iy co:\di- 
ticiiG ir. Soc. 2,3,3 o-t r. c.'Ttr.in point in tho voxccution of 
th- b''cktr.^c’: routine r-.ftcr tho louerhoundn corroeponding 
t: A h''.vo bo. 'll connutod. At th^'/k point, for nil j p, 


ZAY (i, o) = 



< J.owoi'b und of co- responding 
to th j i“'^:.pr pnr'tinl moigimon t 
{vrX-, , vnl^ , ,v\l. ) . 

% J. . X 


.st of tho (u “ p) coluniia of Zj'.)AY ,nro undcfiiiud, 

■-11 ordo-. to ]:iio’^ i;hich portio}i of J/tAV ic defined, 
uo need n vrvrinblo, called IfflX that vill h.avo th>: vo.l'ao p 
when it iG p-a: y pon.-tial aoGign.nont that iG being conci-- 
dere.d far oxtoncion. 

JTow Gunpocc that wo want to 'xtend 'vuIt, ... ,val ) 
ta (val, ...^va.l voJL„ . t ) . ''?hon, wo incronent ITPIX by 1, 

±) ) P > P"^J- 

copy the p--th colunn of 'X'AY into the (p+l)-th colunn cuid 
then assigri val ,, to JlJAV (p:-l, p-i-1). All wa ha.vo to do 

p-:-l I 

now ic to update tho lo'J^orboundo given in JilAV (p+2, p+l) 
through JjIiA.V (n, p+l) because of the increase in >the assigned 
vo.luc of by using tlio update algorithn. 




81 


Ilozi;, DuppoQO wo 1/ant to compute the loi/oi-boundc 
correepondins to ( valj ^ • • • , ) bocaucc ( ) 

wo.G found not to sntiafy the nccoacai'y conditions, ?or this 
cr.s’; jTTIX rcmainc unclianGod, we ncrcly update the p-th 


column of I.OAV h'"’ ouv und.-.to als'''rithm, after aosi.^nLns 
vaJp to J'DAV (p, p). 

rinal3.y, suppose wo want to backtrack from (valu^,...; 

val T val ) to consider (vaj., val .) for extension, 
P-1; P 

Then i/o decrement ITPIX by 1, ascia’n val^'^_-j to Tt'j'AY {71?1X , 
IIPIX) and update IC/IX-th coliuin. 


Me liovo scon oh^.t the update al^oritho requires to 
knew the edyes from a {jivon vortex in the reduced nctwor’:, 
'ihiis dictates the following data structure for the reduced 
netwoik. 


i^hc reduced notwor’: is represented by an array of 
n lists, where the i-th list tells us of the odscs from 


the vortox v.. 


Jack record in th ) i-tli list lias tlirc. 


fields, ITODilUIi for Hojae Number, l.'HIGHT and ITEX!:, The first 


two describe on odec from and the third being an address 

Xf 

loads to tho next edge in tho list. Thus, if v,, has odguc 
. # . , 

to v_ , V., , ,,,, v„ with weights Wj, Wi_,,,., Wn rcspoc-- 

Xj Xj^ J X 

tivol3r, the i~th list wiJLl bo 
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START is an m-element array, the i-th element of 
which stores the start address of the i-th of the above 
lists. 

If there a vertex in the reduced network which 

^t 

has a outdegree zero, then the t-th list will be 


0 


und efined 


X 


This completes the description of the data structure 
for the reduced network. 


The s..:t S (in the algorithm given above for updating 
loworbounds) and its operations .are such that a priority 
queue^ is appropriate for its representation. The queue 
will store subscripts of variables as that specifics completely 
the variables cun’rontly stored. That is, if i is in the 
priority queue .at a certain point of computration, then we 
know that the lov/crbound of x^ has increased but the effects 
of this incre.ase is yet to bo considered. V/e recall th,at the 
subscripts of vp.riables range from 1 to m. There are two ope- 
rations defined with the priority queue. The first one: 
priority queue <- integer 1 

inserts integer .1 into the aueue if it is already not there. 

The second operation 
JJ ^ priority queue 

1) makes the variable JJ equal to the least of the 

integers currently present in the queue and 
— ^ 

1 Knuth (1973) has|definition, applications and implemen- 
tations of priorrty queues, 
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2) dclotcG thia lir'ocQoi- from tlio ciucuo. 

Tho follo^riiiC procedure Uj'^DLUC (for UPJhto Lower 
3ound0) updntcn lowoifbounda according «o tho nlgorithr,i given 
in tho Inst section vrith tho present data structures. It 
talccs throe parfimotor’S, VAL, ITPIII^and LXSEIID, ITEIX tolls 
us the nunhor of components in tho curront palatial assignrac3it, 
and VAL is the updated value of its Jli’IX-th conpon /it, 

h 

-JXTLJTD is a boolean variable irhich is true iff tho partial 
aosigi''xient is obtained by extending in v/hich ease, ire 
recall, nood to define the J]^?IX-th Column of ?jjjAV, 

Prpeodurq 1:PD1L8 (VAL, 13TX, EXfEliD) 
begin 

if lyfLITD 

then f_oi* pp: - T. step. 1 m 

do, I.3A7 (pp, LLAV (pp, lITIX-l) pdj 


LLAV (m^IX, Iinx) ; = VAL » 
initialize prioritj'’ cucuej 
priority'' queue <— IiriXi 
Tjpp£ 

J J <- priority queue ; 

ADR: = CfARf (JJ), 
if nODEUil(ADR) 4 0 


then 
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loop 

wewva:- = (jj, ir'T::)+Wr:iG!"x’(AiT')» 

if. JTr.i/vA:^< > JPAY (jfO’jnjii(ADrJ,:i?i':) 

then 

L:3AV(:;0Dj"’A!(ADi0 := ir.r.'VA' .) 

prio:.'ity queue <— TTODITl/ ;(ADr;) » 

k'DiLz = ITSX? (AirO, 
until. ADR = x » 

untip. priorit 3 ’’ queue ia CKipt 3 rj 

;vn.d 

Putting;’ togetho:’ the ido..n developed in the I'-.rrI: 
three cjctions, nou uo ceri o.-.r;il 3 ’- construct the h-chtruclc 
routine, I'liis routine, ce.].lod BAn'.TJlACh, novec fron one 
purti-nl r,CGignr.icnt to p.nothcr until either it finds e. 
solution or dincovorn thot no solution exists, 

DACJ^fRACi: oporntos on the m x m ^utrix LDAV, irhcro 
n is the nunher of vnrio.hlos in the nggrognti.. equation. 

LDAV Mr.:: defined in tlio last section x:hcro mo have also seen 
hoT7 the use of this matrix sinplifioo louoi-hound computations/^ 
nocosaar:^ 'to chock if a partial asoigninent can he extended 
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to a solution or not. Lowcrbounds arc calculatyd using the 
routine UPDLBS. However, wo can use this routine for a 
partial assignment only if it is obtained from another, 
which implies that the first column of LBAV lias to bo 
appropriately initialized before wo can start considering 
partial assignments for extension. Therefore, BACKTRA.CK 
initializes this column right at the outset. We shall 
consider the initialization in the next section. 

NPIX, as before, is a variable that tells us the 
length of the partial assignment presently under considera- 
tion. Two arrays^ called XIHCR and ABSUBS, are available to 
BACKTRACK. The i-th component of the first array stores 
increment as defined in Section 2.8.3. (In l^ho protocols, 
we have scon the use of those values). The second array 
is for staring u^'s, the absolute upperbound of variables. 
Thus •'ABSUB3 (i) has the value u^. 

BACKTRACK is essentially a loop, the execution of 
which begins after the necessary initializations. Each time 
the execution enters the loop body, a partial assignment 
along with the corresponding lowerbouiids ,and a value VAL 
are already defined. NPIX gives the length of this partial 
assignment. In other words, the first NPIX elempnts of the 
NPIX-th column of LBAV^i.*^.» I<BAV (1, NPIX) through 
LBAV(NPIX, NPIX) contain the partial assignment. Rest of 
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the column has the corresponding lowci^oouncls. The loop body 
cheeks if a new partial assignment can be considered for 
extension cr ‘if the present one directly loads to a solution , 
The new partial assignment is obtained from the one already 
defined by mor jly assigning VAL to HAY (NPIX, NPIX) . Thus, 
the new partial assignment is (TDAV (1, 1TPIXK..L8AV 
(NPIX-1, ITT'I.I) ^ VAL) . If it satisfice all the necessary 
conditions for extension and has a length Ijess than m - 2 
(this ease is considered separately as wo shall soo pre- 
sently) then ' ts cxterision ’'•’il?. he new ■n.‘^rti?>l assignment 
of the rest it .ration of the loop. ITocossary conditions 2 
and 3 (Section 2,3.5) are checked by calling the routines 
GCDCHK and respoctivoly, ( The codes for thoso routines 

follow diroctlv from the definitions of the conditions). 

& 

In both the co,ses, a .boolean variable PASS will bo returned 
true if the corresponding condition is satisfied, otherwise 
it will be rotu ned false, l^he , necessary condition 1 can 
bo tested simply by checking whether VAL is less than or 
equal to ABS'JIS (NPIX) or not. This is done right at the 
outset of the loop. (Note that the other members of the 
partial assignment will necessarily pass this tost). 

If the now partial assignment considered in a loop 
Iteration fails any of the necessary conditions for exten- 
sion wo are required either to backtrack or consider another 
partial assignment of length NPIX, as the case may bo 




87 


(See 2.8*3 )• In such p. cas^^, the next iteration of tho 
loop will consider the appropriate partial assignment, 
therefore, VAL and NPIX arc suitably updated in tho present 
iteration, (along with EXTEND, required for calling UPDLBS 
in the next iteration). It can soon from tho routine 
that the updatings of ^VAL and NFIX arc such that the proto 
cols to obtain new partial assignment are allowed to. 


(V/o know that if a partial assignment fails the 
second neccssp.ry condition then wo need to backtrack. This 
is ascertained by sotting VAL to a value greater than 
ABSU 3S (EPIX). By using a 'goto' to pass control to tho 
portion of tho code for backtracking, ve can save some time 
in tho actual implomontation. ) 

V/hen wc have a partial assignment of length (ra--2) 


that satisfies the first necessary condition, we do not 
check the other two though they arc applicable. Instead, 

WG save backtracking on one variable^ by calling e routine 
GEN2^which finds out if such a partial assignment can be 
extended to a solution or not. When we have assigned some 
val^ to each x^, 1 1 i 1 ni-2, the aggregate equation 

reduces to one having onlj^’ two variables, namely, 


m-2 


When we are dealing with such a partial assignment in 
BACKTRACK, all simple constraints are already satisfied 
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save the ones dealing with absolute b'"'undfi of and 

and (possibly) another constraint of the type; + w. 

Thus, at this stage the feasibility of the problem ins to.nce 
reduces to xrhether or not we have a non-negative integer 
solution to the above two variable equation under these 
few simple constraints. The routine GBN2 decides this. 

(We shall develop the principles on which GEII2 is based 
in Section 2,1;;). If a solution exists then GE1I2 returns 
true in boolean variable OBTBLE and ril and XM return the 
values of x^^ pnd respectively, ;3acktrack routine then 

terminates output'ting the assignment (LMV (1, m-2),,. 

,,I3kY (m-2, in-2) XTII M) for whic’' the problem instance is 
feasible^. 

On the other hand, if OBTBLE ic returned false by GEN2; 

then the present (m-2) component partial assignment cannot 

be extended to a solution and therefore execution of 

BACKTRACK continues, 

procedure BACKTRACK 
^egin 

initialize the first column of IBAV; 

NPIX;= 1, EX'!?EITD;= false i 

VAL:= least multiple of XINCR(l) which is greater than or 
equal to 
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i20£ 

if VA-L > A3SUBS (NPIX) 

then J^f NFIX = 1 then got o failure 

el3 0 KS?1X:= mX-li VAL;=T.-3AV (nPIX,NPIX)+XI.vfCR(NPIX) j 
EXTEND := false fij 

else 

CALL UPDLBS (NPIX, VAL, EXTEND), 
if in?IX = m-2 
tlien accum := 0, 

for index := 1 ^tep 1 until n-2 

dp accum := accum -i- LBAV (index, ra-2) od, 

0 ;= b~accuin 

comment c is used in e nd co amen t, 

CALL GEN? (XMI, 03TBLE) 

03TBLE then goto, success 

els e VAL ;= VAL i- XI:.;0R (m-2)j EXTEND ;= false fi, 

else 

CALL LBSCHK (PASL): 
if not PA3S 

then VAL ;= ABSIEJS (rax)+l, EXTEND := false.i 
else CALL GCDCHK (PASS), 
if not PASS 

then VAL := VA3. + XINCR (NPIX), EXTEND: =false 
else VAL:=: least multiple of XINCR (NPIX+1) 
which is greater than or equal to 
LBAV (NPIX+1, NPIX), 

NPIX : = I'TPIX + 1, EXTEND := true. 
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fi-.i 

£i» 

rep ea t < 

failure ; report that the problem instance not feasible , 
then stop ; 

success := generate solution using L3AV(l,m-2) through 
j J.BAV (m-2, m-2), XMI and XTI .then stop 

2.12 Initializ ation of the Fir st Co lum n of LBAV : 

So that TJPDLBS routine. can be used subsequently, this 
initialization is important, V/e should initialize the first 
column of !'0.1AV to an assignment v;hich will simultaneously 

satisfy the absolute lowei*bounds and the reduced network 

' » 

(as a partial assignment along with its lowerbounds do in 
BACKTRACh). Moreover, LBAV (l,l) should have a value (of 
course, noi.-nogative integer) less than or equal to the 
value of the only component in the first partial assignment 
which BACMRA.CK considers (Protocol 5 of Sec. 2.8,2). The 
value of 30)AV (1,1) will never be less than this initialized 
value in the course of BACKTRACJ.'. execution and therefore, 
every assigned value or the computed lowerbound of any 

variable will always satisfy the corresponding Absolute 

/ 

loweifbound (This follows from Lemma 2,3 and the protocols). 
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It is for thirj reason absolute lovrefbounds are not considored 
either in UPDLBS or in BACXTRACK. 

The initialization can be accomplished by first sotting 
each LBAV (i, 1) to Ij^, i.c. the absolute lowerbound of x^, 

1 i m. Then the initialization is completed by executing 
once the code of UPDLBS, having started the routine with 
all m integers, 1 through m, in the priority queue. Resultant 
first coluiiin of LBAV will then clearly be the assignment wo 
had asked for. 

Apart from its role in BACirTJiACK, this initialization 
stop is important because it . decides the feasibility of 
the set of si.oiple constraints. This is evident from the 
following lemma. 

Le mma 2 .6- Assuming that the necessary condition for feasi*- 
bility given in Section 2.3 is satisfied, the set of simple 
constraints is feasible iff each J.1A7 (i, 1) of the initia- 
lized first column of LBAV, 1 £ i ^ m, is less than or equal 
to Uj^, the absolute uppe^^bound of x^. 

The sketch of a proof is as follows. If the set of 
simple constraints is feasible, then there exists at least 
one assignraent (val 2 ^, val 2 , . . . ,val^) to the m variables of 
the reduced network which will satisfy the reduced network 
and the absolute bounds. For the assignment to Satisfy the 
reduced network and the absolute lowerbounds, it is required 
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that for each i, 1 <. i < m, val^^ i LBAV(i,l). But val^ < 
as the assignment satisfies the absolute upperbounds. Hence, 
if the simple constrain- set is feasible then LMV (i,l) 1 u^, 
for each i, 1 ;< i <_ m. 

On the other hand, if for each i, 1 i 1 m, 

LBAV (i, 1) 1 then mb have, in the first coluinn of LBAV, 
an assignment to the n variables of the reduced network which 
satisfies the reduced network and the absolute bounds. Prom 
such an assignment, one can obtain an assignment for the 
variables of the simple constraint set which will satisfy 
its constraint network, thereby implying that the simple 
constraint set is feasible. 

Reduced netvfork does not exist for a simple constraint 
set which does not sntisfy the necessary conditioii given in 
Section 2,r». In such a case, it is meaningless to talk of 
initializing the first column of LBAV, That is why the 
assumption in the st<atement of the lemma was necessary. 

This completes the sketch of a proof of the above lemma. 

The above also shows that our algorithm will solve 
the integer feasibility problem in polynomial time when the 
input instance contains only simple constraints, Because, 
in time linear with respect to the number of constraints 
we can build the constraint network. Checking the necessary 
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condition given in Section 2,5 can be also acconplished in 

linear time. The most time-consuming step in building the 

reduced network is adding of new edges while deleting a 

vortex. The number of new edges, however, at worst is of 
2 ' 

the order n ^ if n be the number of edges in the constraint. 
Next, UPDLBS routine considers an edge in the reduced network 
at most once. And finally, to check if each LBAY (i, 1) is 
less than or equal to u^, we require only m steps where 
n 1 n. Hence, aS a by-product of our algorithm, ve solve a 
simple constraint set in time polynomial to the input 
length. 

2 . 13 Non-Negativ e Intogo r Solution of ax + by =_c under 
Spmo_Cpnsti^Tir’js‘: Thp^ Basis "of GEN 2: 

In this section, we discuss the principles on v;hich 
GrSN2 routine is brsod. What the code GBN2 should be, 
becomes obvious from the discussion. 

We have noted in Section 2.11 the pui^^osc of fEN2 . 
When the backtrack I'outine is considering an (m-2)-ary 
partial assignment ( val-j^ ,val 2 > . • • aggregate 

eauation reduces to 


a 


•m-1 ^-1 

m-2 


= c 


where, c = b - I val^ f a^^ is the coeffici'^nt of x^^ 
in the aggregate ecuation, GEN2 decides if the partial 
assignment can be extended to a. solution, which is equivalent 
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condition given in Section 2.5 can bo also acconplished in 

linear time. The most timo-consuming step in building the 

reduced network is adding of new edges while deleting a 

vortex. The number of new edges, however, at worst is of 
2 ' 

the order n ^ if n be the number of edges in the conscraint. 
llext, UPDLBS routine considers an edge in the i-edu.ced network 
at most once. And finally, to check if each LBAV (i, 1) is 
less than or equal to we require only m steps where 
n 1 n. Hence, as a by-product of our algorithm, we solve a 
simple constraint sot in time polynomial to the input 
length, 

2 , 13 Non-Negative Into.go r Solution of ax + by jc, undpr 
Som p^ C onstraints Thp^ Basis of GEN2': 

In this section, we discuss the principles on v;hich 
GrIlN2 routine is bosed. What the code GBN2 shoiild be, 
becomes obvious froin the discussion. 

We have noted in Section 2.11 the purpose of .rEN2 . 
When the backtrack :x)utine is considering an {m-2)-ary 
partial assignment ( val^ ,val 2 > . . • . valjjj__ 2 ^ » aggregate 
ea nation reduces to 


^m-1 ^m-1 ^ 

m-r 


= c 


where, c s= b - 1 'val^ f a^ is the coeffici'^nt of x^ 

in the aggregate ec nation. GEN2 decides if the partial 
assignment can be extended to a solution, which is equivalent 
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to decic^ if the above two-variable equation has a non- 
negative integer solution under the following types of 
constraints: 

Tj£e.la)-’ 

1 LBAV (m-1, m-2) and LBAV (m, m-2) 

(That is, the solution must satisfy the lowerijounds) . 

T ype (b) ; 

-ml ^ 1 x^ < u„ 

m-1 — m— 1 ra — m 

(That is, the solution must satisfy the absolute upperbounds). 
and possibly, 

> x_ T + w 
m — m-1 

iff there exists an c<3 ve in the reduced network from v„ 

^m-1 

to V , The weight of the edge is denoted by w, 
m 

An integer (not necessarily positive) solution to an 
equation^ in two variables x and y, 

ax + by = c 

exists iff the ged of a and b divides c. If this condition 
holds then it can bo shown, as in Niven and Zuckoman (1972), 
that every integer solution (r, s), i.e,, x at va,lue r and 
y at s, of the above equation can be expressed in the 
following parametric form; 

1 We consider this form to avoid subscripts in the following 
discussion. 
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r = + (l>/g).t , 

and s = - (a/c) -t . 

uhere (x^, y^) is ani*- particular integer solution to the 
equation, g is the gcd of a and b, and the parameter t is 
any integer: positive, zero or negative. 

Let 1 ^ and bs respectively the given loTrcr and 
upperbound of x and let and Uy be similarly defined. If 
(r, s) is an inte£,'er colution that is acceptable, t’len; 

r 1-1^ 

or, Xq + (b/g).t 1 1^ 

or, t 1 (1^ - x^) 

■‘because t is an intogor, it follows that 

t 1 r ( lx ~ -Q ) g/b 1 

( f I denotes the ceilin.3 operation). 

« 

Therefore, tho lowerbound of x gives a lowerbound of 
t. In a similar fashion we can show that the upperbound of 
X gives the following upperbound of t: 

•fc < L(^x “ ^o^ 

(L J denotes the floor operation). 

Upper and lower boxinds of y, however constraint t 
in the other way. Me have, for s to be acceptable, 
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r = Xq + (b/g) .t . 

and 8 = 7 ^- (a/g)‘t , 

where (x^, y^) is anj'- particular integer solution to the 
equation, g is the gcd of a and b, and the parameter t is 
any integer: positive, zero or negative. 

Let 1 ^ and be respectively the given loir or and 
upperbound of x and let ly and be similarly defined , If 
(r, s) is an inte^^er solution that is acceptable, then: 

or, x^ + (b/g).t 1 1^ 

or, " ^ 0 ^ 

because t is an intogor, it follows that 

t - r(ix - -q) sAT 

([] denotes the ceilinj operation). 

Therefore, the lowerbound of x gives a lo^rerbound of 
t. In a similar fashion we can show that the upperbound of 
X gives the following upperbound of t; 

t i sAJ 

([ j denotes the floor operation), 

I 

Upper and lower bounds of y, however constrs.int t 
in the other way. We have, for s to be acceptable, 
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or, - (a/g).i; i 

or, t < (y^ - IJ.g/a 

because t is an integer, it follows from the above; 
t 1 L(y - 'l,J.s/aj 

1 

Therefore, the lowerTJound of y gives an uppeAound 
of t. Similarly, the upperbound of y gives the following 
loT^ei^ound of t; 

■t 1 r(3^o - u,. ) g/aT 

Fow, to tackle the type (c) constraint, let us assume 
the constraint 

y ^ X + d. 

It can be shown that from this, wo obtain an upper* 
bound of t which is 

t 1 [(y^ - - d) g/(a + b)J 

Let the largest of the two lowerbounds of t he 1^ 
and the least of the three upper'bounds (two, if the cons- 
traint y 1, X + d is not there) be U|.. It follows t]iat 
an integer solution to ax + by s c exists, satisfying the 
lower and upper bounds and the (possible) type (c) cons- 
traint , iff 
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If the above condition holds, then an acceptable 
solution (r, s) is i^iven as: 

r = + l^.b/g 

3 = 70 “ • 

The particular ^Jitoger solution (x^, y^) c-nbo 
easily derived. One inethod to do so is given in J.ivon 
and Zuckerman (1972). To summarize, in the followinj steps » 
we can decide if ax -i- by = c has non-negative integer 
solution satisfying tee three types of constraints discussed 
in the beginning of tlie section, A solution is out|mtt«d 
should it exist. 

;3tej)^J;_; ■pind an integer solution of the equations if such 
a solution exists, else report no acceptable solution 

exists and stop. 

Step 2: Using the particular integer solution and the cons- 
traints obtain 1^ mid u^. 

Step 3 ; If 1^ L u,j. then generate an acceptable fiolution else 
report no such solution exists. Stop. 

GEN2 routine is built along these steps. 

2, 14 Implementati on Notes; 

I fote 1; A FORTRAN piogram was written to test the critical 
parts of our algorithm to solve the integer feasibility 
problem. We note that we can use either very straightforward 
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codes or well-understood algorit'iras for the preparation 
phase, that is, building the reduced network, obtaining the 
aggregate equation and the absolube bounds. Therefore, thr 
PORTEAJ^ program we wrote takes over from this point. The in’^ut 
to this program consists of: 

(a) Thn reduced network cent tu the data structure given 
in Section 2.10, with, a modification given in note 2. 

(b) The aggregate equation, ■'’’’lich is given in the form 

of an array of coefficients of the m variables (renamed) anh 
the right-hand side of the err.- bion. The arra3’' is used in 
checking the second o.nd the tl ird necessary'' condition for 
extension. ?or the former c]:r'c’:, the required god's are 
precoranntod once for all from tim array of coefficients and 
the righ'b-hand side variable. The agj'pregate equation para- 
met erf- are used also in coiiputing XINCR arraj’’ and bjr GEF? 
routinr both of these, as we liave seen, are made uso of !.y 
BACKTPAC!’;. 

(c) Absolute bounds of variables in the form of two arra^'^n, 
ABSLBS and ABSUBS. The elementn ABSLBS (i) and ABSUBS (i) 
store respectively 2.^, the absolute lowcrbound of x^^ and 

the absolute upperbound of x^. The array ABSLBS is used while 
initializing the first column of L3AV. Thereafter it has 
no use as the absolute lowers ounds are always satisfied 
(Sec. 2,12), ABSUBS is required to check if the constraint 
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network is feasible or not (Section 2.12) and ps well as in 
executing BACKTPJICJC. 

The PORTRAIT program was tested on some injiut instances 
on the DEC System 10 at IIT Kanpur. For the example set 
of constraints considered in Section 2.2 and for which the 
absolute bounds, the reduced network and the aggregate 
equation were given in Section 2,6; our PORTPJ'F program took 
only 0.06 seconds of CPU time to decide that the sot of 
constraints is fecvSible. The solution that wac generated 
had as 2, x^ as 4 and Xj^, X2 and x^ as 0, Recoiling 
their old names, we have x as 2, w as 4 and s, v' and z as 0. 

Because x is 2 then both q and r also will be ?, And y is 

(9-y' ) and therefore 9. The value of p can br obtained 
(Sec. 2,5) as 2. Vliis describes a feasible solution for the 
original set of constraints. 

Following i''.! a more difficult example. 

The set of simple constraints: 

X2 Xi + 2, X3 ^ Xi + 3 » i X3 + 1, 

*5 1 I4 1. 3=6 - *4 *6 - ='2 * 

Xy L Xg + 1, Xr^ ^ X3 and Xg ^ X2 + 1. 

The aggregate equation; 

23x^ + llz^ + 16X3 + 4x^ + 12X3 + 9xg 

+ 7x,^ + 3 Xq = 771 
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The absolute lowerbound of each is 0 . 

« 

The absolute upperbound constraints; 

*2> Xj. *8 1 10 

f f Xg p X(y ^ 15 

For the above example, the FORTRAN prosr^.m took 
10.91 seconds of CPU time to decide that the constraint set 
is feasible, Tli'^ solution that was outputtSd is: 

Xi X2 X3 X4 X5 Xg X^ Xg 

1 9 10 12 15 14 15 10 

In another rini, the absolute uppor*bount! of X2 was 
reduced from 10 to 7 (to filter out the above solution). 
Again, the constr int set was feasible, in 9.47 seconds 
of CPU time, with the following solution: 

x^ X2 X3 X4 X5 Xg x^ Xg 

3 5 10 13 15 14 15 8 

In yet another run, the absolute lowei^Dound of x^ 
was increased from 0 to 4, keeping X2 upperbound at 7. The 

I 

program took onli.3^ 0.14 seconds of Ci'U time to furnish tho 
following solution:. 


X^ X. x_ 

D A- 5 

Xg x^ 

^8 

G 11 15 

14 15 

10 


4 


6 
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Note 2 ; In the data structure for the reduced network given 
in Section 2,10, the list of edges emanating from each vertex 
contains records having three fields. Out of these three, 
the field NEXT is not necessary as we can store the records 
in contiguous positions in the memory because addition and 
deletion operations on the list are not required. Thus we 
can have a simplified next-record-address comp’itation provided 
that for each vertex we keep separately the number of edges 
originating from each vertex. 

Not e Abel priority queue as given in Knuth (1973) was 
used in the implementation of UPDLBS, This form of priority 
queue is ideally suited for our purpose because we need to 
store in our priority queue only integers ranging from 1 to m. 

Note 4; Most of the time it is useless to check the second 
necessary condition for extension as the relevant gcd turns 
out to be 1, Similarly, it is rare to see an element of 
XINCR to be an integer other than unity. We have retained 
their use, in our implementation because the saving in time 
is considerable when they are effective. But a more efficient 
implementation will decide before cttlling BACI ThACK if such 
will be the case or not and then incorporate codes for using 
XINCR (i) (instead of the constant l) and for checking the 
second necessary condition for extension. 
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Note An array DUHS was used to improve the efficiency of 
checking for the third necessary condition for extension (or 
LBSCHK as called hy BACKTRA.CK). The array helps because it 
stores a part of the calculation in the following manner; 

If NPIX has a value p, then I3RHS(l) through DRHS(p) 

are defined and D’7T3(i), 1 1 i 1 p is given by 

} 

i ^ 

DRHS(l) = la.. L3AV (j, 1). 

It can be seen that the necessary updrting of DRJIS 

is a simple ma.tter, 

\ 

2»15 Summary of "’r eposed A lgorithm ; 

t 

This section gives a summary of the proposed algorithm 
in seven major steps. The steps are as follot.^s. 

S tep. 0 .; Ensure that the equality constraints in the given 
problem instance satisfies the necessary conditions given in 
Appendix C. Thia step is not essential but, in practice, 
many problem instances will be found infeasible right at this 
stage. We continue^ if the necessary conditions are satisfied^ 
else we report infeasibility and stop. 

Stop 1; Simple constraints are identified and the constraint 
network is built. (Section 2.2). 

St ep 2; The necessary condition given in Section 2,3 for the 
constraint network feasibility is checked. I'e proceed, if it 
is satisfied^ else we report inf easibility ^and stop. 
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Step 3: Constraints which are not simple are cast into equi- 
valent equational forms as given in Appendix 3 . Then the 
aggregate equation is obtained (Section 2.4). 

Step 4; The reduced network is obtained from the constraint 
network and the aggregate equation is simplified as a result, 
when every strong component having more than one vertex is 
collapsed to a single vertex. The absolute bounds on vari- 
ables are obtained aS a by product of getting the reduced 
network (Sections 2,5 and 2.6). 

Ste p. 5; ■^iriables are renamed as a result of topologically 
sorting the vertices of the reduced network. The aggregate 
equation is rev/ritten using these new names (;‘ection 2.6). 

S.tep. .6! The reduced network is cast in the data structure 
given in Section 2,10. 

(This completes the preparation phase following which 
is the BACKTRACK routine phase). 

S tep 7 : (a) Various initializations are made for the 

BACKTRACK routine, e.g.^ defining various arraj^s like ABSUBS, 
ABSIBS, XINCR^etc. This substep also includes initializa- 
tion of the first column of LBAV as given in Sec. 2.12. Then 
we check (Lenma 2,6) if every element LBAV (i, 1) of the 
initialized first column of LBAV is less than A/SCDS (i). 

If not, we know that the set of simple constraints is not 
feasible and therefore, we stop reporting infeasibility. 
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(b) Execution of ".AOICTRACK. (Sections 2.7 to ?.10 describe 
the principles on ”hich this routine is based. Section ?.ll 
describes the routine). Then, BACKTRACK stops cither failing 
to find a solution or it does. The algorithm ends here. 




CHAPTER III 


DECISION TREES OP PROGRAMS 


3.1 Introduction ■ 

We have seen in Chapter I that the property of test- 
action separation endows decision tables with many attractive 
advantages. Motivated by these advantages, many generaliza- 
tions of the basic decision table structure (what has been 
regarded in this thesis as decision table per se) have been 
proposed to handle algorithm specification in general. The 
need to generalize stems from the fact that a decision table 
is limited in its scope as an algorithm-specification device. 
The generalizations proposed, however, do not retain the 
property of test-action separation and therefore, as we had 
contended in Chapter I, such generalizations are self- 
defeating in nature. We had proposed an alternative, namely, 
to specify an algorithm by means of a set of decision tables 
when a single table is found inadequate. The present chapter 
and the next explore this alternative. 

We have taken, for this exploration, quite a natural 
route. Algorithms are most commonly specified by means of 
procedural language programs. Therefore, our aim has been 
to see how an algorithm, coded in a program, csm alternatively 
be specified by a set of decision tables. 
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As we shall see, programs have a very' natural rela- 
tionship with what we have defined in this chapter as 
decision trees. These are tree flowcharts enjoying the 
property of test-action separation (that is, wc recall, in 
any execution path no action can precede a test). Also, 
a decision tree can easily be converted to a meaning- 
preserving decision table and the table will have neither 
real ambiguity nor real incompleteness. We have, therefore, 
explored the relationship between programs and decision 
tables via decision tr_ee^. 

In this chapter, we have identified a class of 
programs each of which can be converted to a singl e, meaning- 
preserving decision tree. Next, we show that all terminating 
computations of a general program can be captured by an 
infinite set of decision trees. Also, we show that it is 
possible, by means of a construction, to enumerate such an 
infinite set. 

How infinite sets of decision trees can be finitely 

<■ 

specified to express algorithms is the subject matter of the 
next chapter. 

3 • 2 Some Relevant Concents ; 

We develop in this section several concepts which 
will be of use in this chapter and the next. We start with 
the concept of a trace (Hoare (1978)). 
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Execution of a program is a seauence of events each 
of which is either an acti^ or a test. An action is one in 
which a computation state transition is made and a test 
determines whether at the present state of computation a 
certain condition is truo or not. The sequence of such 
events for an execution is reflected in its trace . A trace 
for an execution is defined as a sequence of eleme nts each 
of which is either an action or an assertion, the latter 
asserts either a certain condition is true or false. Wo 
note that an execution is a sequence of events where a trace 
is a time -independent sequence of elements. 

Let t be the trace of an execution e. If the n-th 
event of e be an action of then the n-th element of t is also 
the action A. If the n-th event of c bo that the condition 
C is found true then the n-th clement of t is the ap-isertion 
'C is true', denoted simply as C. Had the condition been 
found false, then the n-th element of t would have been the 
assertion 'C is false', denoted as C. In a trace, semicolon 
is used both as a separator and a concatenation operator. 

In the context of a program, the trace for an inpu t 
instance i is the trace of the execution invoked by i. (We 
are dealing exclusively with deterministic programs | there- 
fore, the trace for every input instance is uniquely defined). 

For example, we consider the following program; 
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while xl2 ^ x:=x-l o^. 

For an input instance x = 3» the execution of the above will 
consist of the following five events. 


event 1 
event 2 
event 3 
event 4 
event 5 


X i 2 tested and found true 
X := x-1 assigned 
X ^ 2 tested and found true 
X ;= x-1 assigned 
X i. 2 tested and found false. 


Therefore, the trace is the following; 

X 1 2, X := x-lj X > 2, X := x-l> x”Y“2 . 

Next, two programs and P 2 are said to be strongly 
equivalent for an innut instance i if the trace for i in P^ 
is identical with the trace for i in P 2 « We shall call P^^ 
and P 2 strongly oouivalen t if the above is true for every 
input instance i. 

Following two programs , A and B are strongly 
equivalent. 

A : repeat S unti l D 

B : S| while D S o^ 

It is obvious that if P^ and P 2 are strong]^ 
valent for i then the execution of P-j on i ie indistin- 
guishable from that of P 2 on i. In particular, both Pj 
and P 2 specify the same output for i. 


cqui' 

X 
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^ Next, we shall discuss the notion of equivalence 

within ; optimization . 

A. 

Prom the definition, it is clear that a trace is a 
simple straight-lina program interspersed with assertions. 
(These assertions will hold when the straight-line program 
is executed with the input for which the trace is). Now, 
at any point in such a program, the value of every local 
variable (i.e.^a variable whose definition as well as * use 
is confined to the text of the program) is uniquely defined 
in terms of constants and the values of the global variables 
at the start of the straight -lino program. Thus, we have 
the possibility of eliminating a local variable without 
changing the input -out put mapping of the program. Given a 
trace t wo may bo in a position to replace a local variable 
k at each place of its use by an appropriate expression of 
constants and other variables such that the expression 
evaluates to the value that k would have at that point of 
use. In such a case wo may delete from the trace t those 
actions which assign values to k and use appropriate expros- 
sions of constants and other variables at each place where 
k is used. Also from t, wo can delete all assertions pre- 
viously involving k which are now identically true (due to 
the replacement of k). This way from the trace' t we can 
obtain another trace t' . Now as programs, both t and t' 
define the same mapping between the input and output 
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variables, though t' has done away with the use of some 
local variable k. We therefore term t' as the optim ized 
version t . In general, if a trace is obtained from another 
by eliminating one or more local variables, then the former 
trace is an optimized version of the latter. 

For example, from the trace, 

i ;= ni i 1 m» B[i] := A[i] 

the local variable i is eliminated to get the following 
optimized version: 

n ^ m } B[n] := A[n] 

(on the other hand, let us consider the trace 
p := X, X ;= yj y := p. 

Here we cannot eliminate the local variable p in the manner 
described above. In the third assignment, though p has 
a unique value in terms of the value of x at the beginning 
of the trace, there is no expression of constants and other 
variables which can replace p at this third assignment). 

If every trace of a program is an optimized 
version of some trace of another program Pg* then P^^ is 
said to be an optimized version of P2 or P-j^ and P2 are ^ 

I* I y 

said to be equivalent within 'optimization . 

It can be seen that a program and its optimized version 
(should it exist) both define the same mapping between the 
input and the output variables. 
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(Another notion of equivalence will be defined in 
Section 3.5). 

Finally, let us briefly explain the commonly used 
concept of a finite elaboration of a program. Finite 
elaboration results when each loop in a program is unwrapped 
a finite number of times > had the program contained no 
loop, then the program itself is its finite elaboration. 

The following program P 

P : while B d^o S od 

will have as one of its finite elaborations the following 
program: 

if B 

then do 

S , 

, if B then do S od fi 

od 

The above results when the while loop of P is 
unwrapped twice. 

Wo note that a finite elaboration by definition is 
a loopless program. Another important aspect is the follow- 
ing. When a program terminates on an input, then there 
exists a finite elaboration of the program which is strongly 
equivalent to the program itself for that input. 
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3*3 Decision Tree (dt) ; 

A decision tree (hereafter abbreviated to dt) is a 
tree-like flowchart consisting of the following two classes 
of nodes; 

(a) Action node is a node that specifies a computation 
state change, e.g. , an assignment or an input-output. 
Such a node has one in/coming and one outgoing edge. 

(b) Test node specifies a test on the computation state 
vector without altering it. Such a node has one 
incoming and two or more outgoing edges, one for 
each outcome of the test. 

In this thesis, we shall consider only binary test 
nodes, each of which tests a predicate for truth and has, 
therefore, two outgoing edges, one marked T which is 
followed during the execution if the predicate is found 
true and the other edge, marked F, is for the complemen- 
tary case. 

Every decision tree is built by applying the follow- 
ing two rules a finite number of times; 

(1) A sequence of one or more action nodes is a decision 
tree. 

(2) If ^2 >e two dt's^and B be a test node^then 

the flowchart obtained by attaching and Dp to B 
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is silso E dt • The attEching is accomplished by 
merging the T and P brsinches of 3 with the incoming 
edge of and the incoming edge of ©2 respectively. 
Pictorially, the new dt is shown below: 



Thus, a decision tree is a finite, loopless, flow- 
chartjin which every execution path is a sequence of zero 
or more test nodes followed by a sequence of one or more 
action nodes. We can sec that a dt has the property of 
test- action separation as defined in Section 1.2. 

The dec ision part of a dt is that part which consists 
of all and only the test nodes, and this part is a rooted 
binary treei every path in this tree, from ttie root to the 
frontier is called a decision sequence . At the end of each 
decision sequence, we have a sequence of one or more actions. 
The latter sequence is called an action sequence . A decision 
sequence followed by its action sequence, together will be 
referred to as a rule in the dt. 

Note 1; In diagrams we may not always draw the incoming 
edge to the root of a dt and the edges going out of the 
frontier of a dt. 
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Note 2; We shall consider NOOP, i.e,, a state change with 
an identity mapping, as an action { though we may not show 
it on a diagram if it is at the frontier. 

j:.f .. 

Figure 3«1 gives three examples of dt's. 



Pig. 3.1; Example^ dt’s. 

Subsequently, in this chapter and the next, we shall 
see many examples of dt’s. 


3.4 Deci s ion Table of a_ d_t ; 

It can be seen that each execution path in a dt is 
like a decision- table rule and there are only a finite 
number of execution paths in a dt. Therefore, we can 
easily convert any given dt D to a meaning-preserving 
decision table D’ . D’ will have as many rules as there 
are execution paths in D, JC each rule reflecting one such 
path. Cavouras (1974), Gupta (1969) have algorithms which 
can be used to convert a dt to the decision- table foxm. 

> , I ,. ' ■ ->,,1 . ^ J f - ^ . 

1 Por convenience of drawing, actions may not be shown 
in boxes in dt figures, e.g.,’Pig. 3.1(b). 
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A decision table which is obtained from converting 
a dt will be free of both real ambiguity and real incomplete- 
ness. One way to show this is the following, let A be a 
decision table obtained from a dt B. If A has real incomplete- 
ness ^then it means that there exists a valid input instance 
which selects none of the execution paths in B. But B, being 
a flowchart, can always be executed on any valid input. 
Therefore, A cannot have real incompleteness. 

On the other hand, if A has real ambiguity , then 

there exists two distinct execution paths in B which can 
5 

be exercised by a valid input instance. Now if p and q 
be two distinct execution paths in B^then there exists a 
test © in B from which p takes the T branch and q the P 
branch^or vice-versa,. Therefore, the test 6 is both 
true and false for the input instance that exercizes the 
two distinct paths. This, of course, is a contradiction. 

Hence A cannot have real ambiguity. 

In a decision table obtained from a dt, though one and 
only one rule will be applicable for each valid input 
instance, there may exist valid input instances for which 
not all the conditions of the table arc defined. We may 
illustrate this thro ugh the following example. 

Let us consider a file that has two types of records; 

A and B. A tag field t identifies the type. If t is 1 then 




116 


the record is of type A and it is of type B, otherwise. In 
addition to t field, records of type A contain fields x and 
y, while type B record contains three fields: x, y and z, 
in addition to t. The processing to be done on a record is; 
Record type A ; If x is greater than y, then set u to zero 
and X to x-y, otherwise set u to y-x and x to zero. 

Record tvne B ; If x is greater than y + z, then set u to 
zero and x to x-y~z, otherwise set u to y + z - x and x to 
zero . 

(For a real-life flavour, wo can think file to be 
the transaction file for two product types A and B. x is 
the amount on hand , y and z are the amounts to be supplied 
to two customers, one of the-n being common to both the 
products^ while the other is exclusivety for product B, 
u is the amount to be manufactured to meet the demand.) 

The dt shown in Figure 3.2 is to process a record 

of the file. The dt Figure 3.2 is converted to the decision 

> *' ' ' 

table in Figure 3.3 by an algorithm like Cavouras (1974). 

Now, for a type A record, the field z does not exist 

and so testing of condition C3 will be undefined for such a 

Uytl 

record. However, either rule R1 or R2jl^be specified for a 
type A record as C3 is ignored (having 'don't care' entries) 


in these rules. 
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u t» y-fz-x u 3« 0 « t *# y-x u '■ 

X 0 X ;*» x*.»y-.a x t«. C x :« x— y 

Fig* k tit for record- OT' 006 sol ti/qr ezHSipla. 

f 

'Tota t Hera and in aPAbsaquant dt fljR:ij,re5, adtlonr are 
not ehoim In boxaa for co*tv«nj 4#iica . 
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Therefore, we shall not insist that each condition 
in a decision table bo defined for every input instanoe. 

This is not inconsistent with decision table interpretation 
which is to select one and only one of the rules of a 
decision table, the assertion of which is satisfied (by 
the input instance). We have seen that the decision table 
obtained from a dt will always be interpret able. Therefore, 
dt's and their decision tables can be used interchangeably. 
This ;justifies the course that we shall take, namely, to 

V 

relate programs to dt's. The relation^* will perforce 
carry over to decision tables as well. 

3 • 5 Fro m loopless F l owcharts to Decision Trees ; 

In this section, we shall see how to obtain a meaning- 
preserving dt from any given Xloopless flowchart. Every 
loopless program can bo trivially converted to an equivalent 
loopless flowchart and so our result will cariy over to such 
programs as well. 

A flowchart, like a dt, has two types of nodes, 
namely test nodes and action nodes. Action nodes change 
values of variables, therefore, they jaffect a change on the 
(computation) state-vector. We shall find it convenient to 
specify actions in terms of its effect on the entire state- 
vector. A sequence of one or more action nodes can be 
regarded as a transition from one stat^vector to another 
and can be represented as. 
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s: = f (s), 

where s is the statevector and f is some mapping* Similarly, 
the test in a tost node can be regarded as testing some 
predicate B, 

The conversion from loopless flowcharts to dt's 
makes use of the two transforioations described below. 

Transformation 1 ; 

A given flowchart can be drawn in such a manner 
that each edge (i.e.^a control flow link) originates, only 
from some node, test^or action and terminates at some 
other node. We shall assume all our flowcharts are in 
this form (e.g. Figure 3.7). 

In a general loopless flowchart, there may be more 
than one edge incident on some node. The present trans- 
formation reduces the number of such nodes by one when 
used on a loopless flowchart having one or more nodes with 
multiple incident edges. 

A given loopless flowchart can be regarded as a 
digraph, vertices of which are the nodes of the flowchart 
and the edges of the digraph are the edges of the flowchart. 
Because the flowchart is loopless, the digraph is acyclic 
and so, we can topologically sort (as ezplained in Sec. 2.6), 
its vertices to assign a topological sort number to each of 
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them. Thus, each node of the given flowchart has such a 
number. If there is a path from node u to node v.then v 
has a larger topological sort number than that of u. 

Of all the nodes on which more than one edge is 
incident, let us consider that node 0 having the largest 
topological sort number. Let 9 be a test node testing 
the condition P(s). Let there be m edges, ra ^ 2, incident 
on 6, and let them be originating from p-j^, P 2 , Pj^. 

Let Q-j^ and 0,2 t)e the parts of the flowchart following res- 
pectively T and P edges of 9. Pigure '^.4 describes this 



Pig. 3.4: A situation where Transformation 1 
is applicable. 


(Pigj;^e 3.4 needs the following justification. There 
can be no edges betwe®i ^2 also between a point 

in the flowchart from which some Pj^ is reachable and another 
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point in either or Q 2 . Should such an edge exist, then 
existence of axioiihc;r iiude with multiple incident edges is 
implied which would have a topological sort number greater 
than that of 6. Also, an edge is ruled out from any point 
in or Q 2 to a point from which any p^^ is reachable. This 
is because the given flowchart is acyclic. This justifies 
the figure where and Q 2 are shown disjoint, where no edge 
comes out either of or Q 2 and where only edge that goes 
into either or Q 2 » is from 0). 

The present transformation deletes 0, Q^^ and Q 2 and 
the edges shown in Fig. 3*4. Then it attaches the followjng: 


to each 
in Pig. 





P(s) 



r:Q2 


^1 1 V 

p^. In effect, the nart in the given flowchart shown 
3,4 is replaced with what is shown in Pig. 3.3. 




Pig. 3.5; Result of Transformation 1 for the 
situation depicted in Pig, 3.4. 
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About the above transformation, firstly we note that 
because no node in either Q-j^ or Q2 can have more than one 
incident edge (otherwise 0 would not be the node with 
multiple incident edges having the largest topological sort 
number) the transformation reduces the number of nodes 
having multiple incident edges by one. 

Secondly, the resultant flowchart after transfor- 
mation 1 is strongly equivalent to the original one. It can 
be easily seen that thero is a one-to-one correspondence 
between the execution paths of one and those of the other 
flowchart. 

In a similar fashion wo can deal with the case when 
© is an action node. 

Transformation 2; 

This transformation is for moving a test across a 
preceding action, (or a sequence of actions) without changing 
the meaning. The transformation acts on a part of a flow- 
chart wh*ere an action node a precedes a test node 0 as shown 
below : 


a 




?1 

z' 

< 

II 

• • 

CD 

(s) 1 
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Let (X assign A(s) to s and let 0 test the condition 
B(s). P2 P^ denote three points in the flowchart 

to identify the above subpart (We note s ;= A(s) can also 
describe the effect of a sequence of action nodes). 

The transformation replaces the above subpart by 
what is shown below; 

Pi 



What B(A(s)) means is the following: Action (s) 
specified by s ;= A(s) is (are) symbolically evaluated^ 
(King (1976)). Then a new predicate is constructed from 
B(s) by replacing each free variable in B(s) by the sym- 
bolic value of the variable from symbolic evaluation. (If 
a variable x is not updated by A, then its symbolic value 
is x) • The predicate constructed is B(A(s)). 

Another way to explain the transformation is the 
following. Let a be an action that assigns the expression 
e to a variable x. Then B(A(s)) is the predicate obtained 
by replacing in B(s) each free occurrence of x by e.(We note 
that every action can be modelled by an assignment). 

1 Also called symbolically executed. 
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Figure 3«6 is an example of what the above transfor- 



(a) Before Transformation 2 (b) Result of the 

action Transfoimation 2 on (a) 


Pig, 3.6; Example of the action of Transformation 2. 


Now the conversion of a given loopless flowchar t to a djt 
can be described in the following two steps. 

Step 1 ; Starting from the given flowchart apply transforma- 
tion 1 repeatedly till a flowchart is obtained which has no 
node having more than one incident edge. 

Step 2 ; Next, transformation 2 is repeatedly applied till a 
flowchart is obtained where there is no test which is preceded 
by an action. The resultant flowchart is the dt obtained 
from the loopless flowchart. 

Let us first show that the above conveision converts 
any given loopless flowchart to a dt in a finite number of 
steps. Step 1 is repeated application of transformation 1 
each of which reduces the number of nodes having multiple 
incident edges by one. Since the number of such nodes is 
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finite in the initial flowchart, the termination of Step 1 
is guaranteed. 

Next, we note that the flowchart we started with was 
loopless and this property is retained by the first trans- 
formation. In addition, at the conclusion of Step 1, there 
can be no node which has more than one edge incident on it. 
Therefore, the flowchart obtained at the end of Step 1 is 
a tree. 

Next, in this intermediate flowchart (which is a tree), 
if at all there is a test node which is preceded by an 
action, it will be in a form where the second transformation 
is applicable^ i.e. , the only edge incident on the test node 
is from the preceding action. Repeated application of the 
second transformation retains this property in the succe- 
ssive flowcharts. Moreover, the tree- nature of the flowchart 
is also retained. So, we need to apply the second transfor- 
mation only a finite number of times (as there is no loop 
in a tree), to obtain a tree flowchart where no action 
precedes a test. Such a tree is, of course, a dt. Thus we 
see that the conversion described above obtains a dt from 
any given flowchart. 

The dt of a loopless flowchart . C, is the dt D which 
is obtained from C by the above described conversion 


process 
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Next, to show that the conversion la meaning- preserv- 
ing, we have the following lemma. 

Tiflmma A loopless flowchart and its dt both specify 

the same input-output mapping. 

Proof: Let C be a loopless flowchart, which after the Step 1 
of the conversion becomes the flowchart C;j^. Let D be the 
dt obtained from at the completion of Step 2, in other 
words, D is the dt of C. 

We have noted before that if transformation 1 trans- 
forms a flowchart C to C” then C and C" are strongly 
equivalent. Because Step 1 is only a repeated application 
of this transformation, we have that C and are strongly 
equivalent. 

Also, we have noted before that is a tree which 
is converted to a dt D by repeated application of transforma- 
tion 2. It can be seen that the process leaves the frontier 
of unchanged, therefore if we consider some node a (which 
will be an action node, necessarily) in the frontier of 0^^, 
we can identify the same node in the frontier of D. Let p be 
the path in Ci from the start to a and let q be the path in 
D from the start to the same node. Clearly the path q results 
from the path p due to repeated application of transformation 2, 
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Next, we note that the sequence of action- in p is 

j-V> 

identical with that^f q as transformation 2 does not add 
or delete actions, and leaves their relative order same 
in a path. Next, we note that if the state vector s is 
first changed to A(s) and then is found to satisfy (or, 
not satisfy) some condition B(s), then this Implies that 
the original statevector will satisfy (or not satisfy) the 
condition B(A(s)). Using this idea inductively, we can see 
that if, for some input Instance, the path p is followed 
while executing then, in the execution of D, for the 
same input instance, the path q will be followed. Thus, 
the output specified for the input instance will be same in 
both and D. However, we have noted that is strongly 
equivalent to C, the given flowchart. Therefore, we can 
conclude that for any input instance, the same output is 
specified by both C and D. Hence the lemma. 

We have already defined (Section 3.2) two types of 
equivalence, namely strong equivalence and equivalence, within 
optimization. Now wo can define another type of equivalence, 
which shall term as rule equivalence . 

Let t^ and ^2 two traces such that; 

(1) The actions and the sequence in which they occur 
are identical in t^, and t2> 
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(2) Both t^ and ^2 the same number of assertions, 

(5) In one of the traces, say tgt all the assertions 
precede the actions, i.e., there is no assertion which is 
preceded by an action ^ and, 

(4) If t«j^ is feasible^ for an input instance i then t 2 
is also feasible for i and vice-versa» 

then we shall call the trace t 2 to be rule equivalent 
to t]^. The name is derived from the observation that the 
trace t 2 has the same form as a decision table rule. 

A program P 2 will be said to be rule equivalent to 
another program P^^.if every trace of P 2 is rule equivalent 
to some trace of P^^. 

We can see immediately that the dt of a loopless 
flowchart is rule equivalent to the flowchart. (In the proof 
of Lemma 3»lf the trace reflected by the path q is rule 
equivalent to that of the path p). 

It is to be noted that if a program P^^ is rule equi- 
valent to another program P 2 » then both P^ and P 2 specify 
the same input-output mapping. 

Figure 3,7 shows an example flowchart and its dt is 
given in Figure 3*8. 

1 A trace is said to feasible for an input instance if, when 
the trace (regarded as a straight-line program) is executed 
on the input instance, each assertion of tiie trace is found 
true during the execution. This ivitlon of feasibility is 
from Hoare (1978). 
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The conclusion of this section is the following 
theorem; 

Theorem 3»1 ; Every loopless flowchart can be converted to a 
single rule -equivalent decision tree. 

We end this section with a few notes. 

Note 1 ; It is necessary to clarify how actions specifying 
input operations that prece(i|^ tests in a flowchart are made 
to follow the tests in its dt. Let us consider the following 
flowchart fragment: 1 


read 



It may be argued that the test x > y must necessarily follow 
the read operation otherwise x beccmes undefined or it 
retains an unwanted definition. However, though x can be 
undefined before the read operation, the value that x is 
to take is not. This value already resides in some input 
medium or (in real-time systems) exists at least potentially. 
Denoting this value as <x> , we can describe the flowchart 
fragment equivalently by the following decision tree; 
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There remains, however, a notatlonal problem as the 
symbol i::' canuot be used when there ^e more than 
one Jl^read operation for x in the same execution path. We 
can use a subscript to differentiate, that is, the value x 
gets through the first read operation is <x>u^, then <x> 2 
through the second read operation and so on. 

This approach is similar to what Howden (1977) does 
for variables defined multiply through more than one read 
operation in DISSECT symbolic program evaluation system. The 
symbolic value generated for x at a read statement is x;k, 
where k is the so called 'path index' which denotes where 
in the symbolic execution the read statement has occurred. 

l^To te 2 ; If D be the dt of a loopless flowchart C, then no 
local variable of C will occur in the decision part of D. 
This is because before we can use a local variable in a 
we need the variable by an action. Since 

in a dt no action can precede a test, local variables will 
not be used in its decision part. 

In fact, in a dt the need for a local variable is 
much less than that in general flowcharts. Local variables 
help in merging paths in a flowchart. Paths are merged 
(usually) only after noting their difference in terms of 
state-changes of variables. Often local variables are the 
variables employed for this purpose. In a dt, however, paths 
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never merge (because it is a tree). Thus, we see that the 
role of local is curtailed in a dt. That is why 

often^one or more local variables of a (loopless) flowchart 
become redundant in its dt. In such a case, we can easily 
get another dt, by eliminating such redundant variables 
from the dt of the flowchart. The dt that we obtain will 
be equivalent (within optimization to the old dt. 

^ I 

The local variables x' and y' of the flowchart in 
Pig. 3.7 are redundant in the dt shown in Pig. 3.8. By 
eliminating these variables we get the dt of Pig. 3.9 which 
is equivalent within optimization to the dt shown in 

r t 

Piguf^e 3.8. 

Note 3 ; We have remarked that B(A(s)) is constructed by 
first symbolically evaluating A(s) and then updating B 
with the symbolic values for variables. In this context we 
note that although symbolic evaluation in general may give 
ambiguous symbolic values to variables (King (1976)) , the 
symbolic evaluation of a sequence of action nodes cannot 
give ambiguous veO-ues. This is so because the value 
(symbolic or otherwise) of a variable is defined by the 
last assignment to this variable in the sequence. Because 
in a sequence, there can only be one such last assignment of a 
variable, every variable will have unambiguous symbolic 
value. 
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3«6 A Related Work ; 

Davis (1972) has considered a related problem of 
converting a tree flowchart in which tests and assignments 
are interspersed to an equivalent flowchart ^in which all 
tests will be together, assignments can occur before or 
after /^the tree made only of decision nodes. (Every test 
checks a Boolean variable). 

To solve the problem, each of the left-hand side 
variable of assignments that occur between two tests is 
given a descriptor to show which is the branch of tree 

t 

flowchart where the assignment occurs. In the right-hand 
sides, or in a test, if a variable occurs to which a des- 
criptor has been attached in any of the predecessor branches, 
then that variable gets the most recent descriptor attached 
to it at that occurrence. Assignments whose left-hand 
variables are not involved in tests or in other assign- 
ments are moved below the tree. Rest of the assignments 
are moved to the top of the tree. 

For execution, the top assignments are performed 
first. These assignments are temporary pending final 
decision results. Then the tests are performed to find 
out which path through the tree is satisfied. The assign- 
ments which were on this path in the original flowchart are 
made permanent. 
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Davis reports that significant speed-up is achieved 
using this technique on multi-processor parallel machines. 

As an example, we consider the flowchart in Pig. 3.10. 
The flowchart in Pig. 3.11 results after using Davis's 
method. 

Capital letters denote Boolean variables, small 
letters expressions^ and Greek letters further actions. 
Descriptors are integer sequence subscripts. 




Pig. 3.10: A tree flowchart Pig. 3.11: Plowchart of Pig. 3. 10 

after JJavis' conversion. 

Note: The example is from Davis (1972). 
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To compare our approach to Davis’ , first of all 
we note that his method will not lead to a decision tree as 
assignments can be performed both before and after the 
tree of test nodes. However, both approaches share the 
basic notion that it is necessary to change what is being 
tested in order to move assignments across tests. Also, 
we find that the notion of symbolic evaluation can do away 
with the inconvenience of defining extra variables and 
dealing with temporary assignments which are to be made 
permanent later. 

3*7 Decision Trees of General Pi-ograms ; 

In this section, we shall relate general programs 

J 

to dt's. A program, in general, can specify arbitral^ large 
amount of computation depending on the input and, it may 
not even terminate for some input instances. On the other 
hand, a dt is defined in such a way that its execution will 
always terminate. Clearly then, a dt cannot handle non- 
terminating computations which may be invoked by a general 
program. 

It is, however, possible to relate the terminating 
computations of any program to a set of dt's. When, on a 
given input instance, a program terminates ^ then each of its 
statements is executed only a finite number of times. 
Therefore, there exists a finite elaboration of the program 
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which is strongly equivalent to the program itself for that 
input instance* Now, a finite elaboration of a program 
alternatively be viewed as a finite, loopless flowchart and 
we have seen that such a flowchart can be converted to a 
rule equivalent dt. We can then immediately conclude that 
if a program P terminates on an input instance I, then 
there exists a dt D which, for I, specifies the same 
output as that of P executed on I. 

This leads us to define the dt's of a given program 
in the following manner. A dt D will be called a dt of a 
program P if D is rule equivalent to some finite elabo- 
ration of P. 

Because the number of finite elaborations of a 
program can be infinite, we need to associate an infinite set 
of dt's with a program in general. Clearly, the set of dt's 
of a program will capture all its terminating computations. 
The theorem below summarizes this discussion and also shows 
that it is possible to construct any member of the set of 
dt's of a given program. 

Theorem 3*2 ; It is possible to enumerate the dt's of 
any program S by a sequence of dt's 

nS dS t)S 

"l» ■L'2» *** 

such that for any given n, we can construct the dt 




139 


Moreover, if S terminates on some input instance I, then 

g 

there exists some dt in the sequence such that, for I, 

g 

the program S and both specify the same input-output 
mapping. 

Proof ; Without loss of generality, we shall assume that S 
is written in the following simple but general purpose 
language • 

A program in this language can have two types of 
statements, primitive and compound. 

Primitive Statement; This is either an assignment statement 
or an input/output statement. Therefore, the statement 
describee an action. 

Compound Statanent ; A compound statement is either a 
primitive statement or is built recursively in the following 
three ways. Let S-j^ and S2 be compound statements and B be 
Boolean expression (evaluating either true or false). 

(1) ) $2 is a compound statement. 

This composition is sequencing . 

( 2 ) Branching ; 

if b then else Sg fi 

is a compound statement, and 

( 3 ) Looping ; 

while b do od 

is also a compound statement. 
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All these above three foims of composition have 
the usual semantics associated with them. 

Clearly, the given program S itself is a compound 
statement. 

If S is a primitive statement then for all m, iF 

in 

is defined to be just a one-node dt, the single node des- 
cribes the action of the primitive statement. The theorem 
is obviously true when S is a primitive sentence. Next, we 
shall prove the theorem true when S is a compound statement^ 
assuming the truth of the theorem for the constituents of S. 
In effect, we are proposing an induction on the length of the 
program. 

g 

The proof is by giving a construction for D , for 
all positive integer n, using the dt’s of the constituents 
of 5. Any computation of S can be defined in terms of the 
computations of the constituents of S. Any terminating 
computation of S will, therefore, use various possible ter- 
minating computations (which are captured in their dt's) 
of its constituents. The construction ensures that all 
the dt’s of the constituents of S are considered to build 
the dt’s of S. This way it is ensured that there will be 

some dt w hi ch is rule equivalent to a given finite 
m 

elaboration of S. 
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In the construction process we shall require a 
bisection from set of positive integers to the set of tuples 
of positive integers. The bisection we use is a well-loiown 
one (defined first by Cantor). let us consider the following 


two-dimensional array of 'tuples 

given in 

Table 3*1: 

.(1,1) 

-~(1,3) 

(1,4) 

... (if m) 

f is, 2)^ 

(2,3) 

(2,4) 

. . . ( 2, m) 

^ (3, 1)^(3, 2) 

(3,3) 

(3,4) 

... (3» m) 



(n,l) (n,2) (n,3) (n,4) ... (n, m) .. 


Table 3.1; Table to define a bijection from positive 
integers tojtuples of positive integers. 


The bijection is as follows. 

1 gets mapped to the tuple (1, 1), 2 to (2, 1), 

3 to (1, 2), 4 to (1, 3), 5 to (2, 2), 6 to (3, 1). 
and so on zigzagging across a diagonal as shown by the 
line with arrows. We shall refer to this mapping as the 
pair-map . 

Now we are ready to consider the case when the given 
program S in the statement of the theorem is a compound 
statement not a primitive one. Prom the definition of 
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what a compound statement can be, we know that the imme- 
diate constituents of S build S either by sequencing or 
by branching or by looping. We shall take each of these 

g 

cases and indicate what will be for a given n. 

Case 1 ( S equenc ing ) 

Let the given program S be 

S : , S2 

where S]|^ is a compound statement the immediate constituents 
of which do not form by sequencing, (This is to avoid 
ambiguity in identifying the constituents and S2 for S), 

g 

To build D^, let us obtain that pair which n is mapped 
to by the pair-map. Let the pair be (m^, 1112). We then 

obtain a loopless flowchart C by attaching a copy of the 

So Si 

dt after each node in the frontier of Ijjj . Next, C is 

converted to a dt using the conversion process given in 

Section 3.5. The dt that we obtain is defined as I^. 

A-i 

The rationale yf this construction is as follows. 

We note that every finite elaboration of S can be viewed as 
some finite elaboration of Sj followed by some finite 
elaboration of S2« Let us consider a finite elaboration 
B of S. We can then identify B^^ and B2, some finite elabo- 
ration of and S2 respectively which build B. Because the 
theoran is valid for Si and S2» there exist two positive 
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1 

integers, and m2 such that is rule equivalent to 
S 2 

and to B2» Let C be the flowchart obtained by attaching 

^ ®2 Si 

a copy of £ after each node in the frontier of It 

can be seen that E and C specify the ssune input-output 

S 

mapping. Now, when C is converted to a dt then this 
dt and B will also specify the same input-output mapping. 


The pair-map is such that for any pair (m-j^, mg), 
there exists an n which is mapped to this pair. Therefore, 
for any given finite elaboration of S, say E, there exists 

g 

an n such that the dt and B specify the same input-output 

g 

mapping. From the construction, it is obvious that thus 
constructed is a dt of S. Therefore, we see that the 
theorem holds for S. 


Case 2 : (Branching) ; 

Let the given program S be of the form 


S : if . B then 83^ else $2 fi 

Let n ,is mapped to (m^^, m2) by the pair-map. Then 

is constructed as follows. The root of is the test 

node which tests B. Then, to T branch of this node we 

Si ' S2 . 

attach the dt and to the P branch is attached. 

The dt then obtained is D^, Pictorially the dt is shown 


in Pigua-6 3.12. 
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Pig. 5# 12: whon S is ^ B then else $2 f 1 . 

I ; ; • • ' 

By arguments similar to that used in the last case, 
we can justify the present construction. 

Case Looping) 

Lot us now show how to construct when S is given 
S : while B do 3^ od 

Our construction should be such that for any given 
finite elaboration of S above, there will be a rule equiva- 
lent dt I^, for some n. To ensure this, we must first see 
how to enumerate all finite elaborations of S in some manner. 

We can obtain different finite elaborations of S by 
unwrapping the 'while’ loop 0, 1, 2, ...,etc. times. Let 
us now consider the loopless flowchart C obtained by 
ttnwra]|)ping the 'while' loop in S, p times, for some p greater 
than or equal to zero. In C, we shall have p nodes, (each 
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node having one incoming and one outgoing edge) each of which 

will specify the looptbody computation i.e., However, 

S, can have infinite number of finite elaboration^ any one 

of which may be used at any of the above p nodes to obtain 

a finite elaboration of S (with the loop unwrapped p times). 

We recall that our theorem will be held true for and there 

fore we can use equivalently a dt of in place of any of 

its finite elaborations. Moreover, the dt's of Sn are 

Si 

enumerated by ' s according to the theorem , i.e. , an 
integer can name a dt of 

Prom the above discussion^ we see that we can charac- 
terize every finite elaboration of S by an integer sequence 
defined below. The sequence has (p+1) integers, the first 
of which is p, p i 0, Then, a sequence will be 


P» <li» ^ 2 * •••» ‘Ip* 

The Interpretation of the sequence is as follows. 
The first integer^ i.e., p tells us that the finite elabo- 
ration of S, which is being characterized, is obtained by 
unwrapping the 'while' loop p times. The other p members 
of the sequence identify the dt's of which are rule 
equivalent to the finite elaborations of Sj used in the 

present finite elaboration of S. In particular, q. 

Si 

specifies that IL is rule equivalent to the i-th loopbody 

'^i 

in the finite elaboration (i.e. in an execution, the i-th 

1 ^1 
looi^ody execution will be equivalent (rule) to 
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Next, we need a bijection from the set of positive 
integers to the set of sequences defined above. Wo shall 
employ Table 3*2 for this. 

1.1 1,2 1,3 1,4 1,5 1,6 .. 

2.1.1 2,1,2 2,2,1 2,1,3 2,2,2 2,3,1 .. 

3, 1,1,1 3,1,1, 2 3,1, 2,1 3, 2,1,1 3,1,1, 3 3,1, 2, 2 

• • • • e • 

• • • • • • 

• • • • • « • 

Table 3.2; Table to characterize finite elaborations 
of a loop. 

Each entry in this table is a sequence to define a 
finite elaboration of S. The sequences in the p-th row 
of the table is for all those finite elaborations of S 
which are obtained by unwrapping the 'while* loop p times. 
Therefore, the first integer in each of the sequences in 
the p-th row is p. Rest of the members of such a sequence 
form p partitions of some integer m, where m is the sum of 
indices of the dt's of which (rule) equivalently capture 
the p looi^body execution specification. To take care of 
every possibility, m is varied along the p-th row from its 
lowest value i.e. p in steps of 1. As m will have more than 
one partition except when it equals to p, we need to arrange 
systematically the sequences partitioning the .same m. This 
is done by arranging them^from left to right^in increasing 
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alphabetical order. To Illustrate, when p » 3 and m a 4, 
we have the following order of three possible sequences: 

3»lfl»2 3»lf2,l 3»2,1,1 

(It can be shown that the number of above partitions given 
p and m is given by the expression (m->p + l)(m-p + 2)/2) 

Now we are ready to state the construction of 1 ^ 
vhexi 8 is given as while B ^ od. If n equals 1 then 
this is for the case when the 'while* loopbody is not 

O 

executed at all. Therefore, the dt is just a one-node 
tree, the node in it is for the action NOOP. 

For any n, n > 1, we get n^ which is (n - 1 ). Next 
we get the tuple (m^^, m2) which n^ is mapped to in the 
pair-map. Ve use the tuple to select the sequence in 
Table 3*2 which is at the m-|^-th row and m2~th column. Let 
the sequence be 


P# <li» <l2* •••» ‘Ip 

Next, we obtain the flowchart shown in Pig»3^e 3.13 by 
unwrapping the 'while* loop p times. 


In the flowchart of Fig. 3.13 there are p, boxes, 
numbered 1 to p from the top to the bottcxn. Next, in the 
process of constructing ]£, we replace all the Sn boxes 
in Pig. 3.13 by replacing one marked i by the dt 

^i 


for 




148 



fig. 5.15t 


An fXfvotaart in tht 

eonitmtlon «f lAirt 8 !■ 


XUli ^ dtL ^ Sl* 
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11 i Ip. (qjL*8 are defined in the sequence we had 
obtained from Taule ^.2). 

The replacement is as follows. jthe box A is to 
be replaced with dt D. (A will jhlriiave one Incoming edge 
and one outgoing edge, as can be seen in Fig. 3.13). Let 
0 be the portion in the flowchart following the edge 
from A. Then to replace A by D, we remove A from the 
flowchart, and attach D to the edge previously incident on 
A. Next, after each of the nodes in the frontier of D, 
we attach a copy of Q. This conqpletes the replacmnent of 
A by D. 

When each box in Pigul^e 3.13 has been replaced 
with the appropriate dt of S-j^, we obtain another looploss 
flowchart. This flowchart is converted to a dt using the 
conversion glvmi in Section 3.3. The dt that we obtain 

q 

is 1^, The ccnctruotlcn ensures that this dt is rule 
equivalent to the finite elaboration of S that Fig. 3.13 
purports to be. 

It can be seen that the 4;able 3.2 is such that every 
finite elaboration of S has a representation, except when the 
looppody of S is not executed j^t all - a case which has been 

[ g 

dealt^separately (for convenience) to get Using the 
pair-map to select an element of the^ble 3.2 ensures that 
for every finite elaboration of S, there exists an n such 
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C! 

that and the finite elaboration are rule equivalent. This 
ends Case 3 in which we have considered S as while B do 

The above discussion describes the construction of 

Q 

given any program S. We have seen that the construction 
will ensure the existence of a dt in the sequence of D^'s 
which is rule equivalent to a given finite ^elaboration of S, 
assuming the theorem to be true for the constituents of S. 

(We have already noted that the theorem is obviously true 
when S is a primitive statement). Therefore, we have that 
if an input I terminates on a program S, then there exists 
a dt, B^, which specifies the same output as S for I, as 
there exists a finite elaboration of S which will be strongly 
equivalent to S for I. This completes the proof of 
Theorem 3.2. 

We end this section with the following notes. 

Note l ! For the above construction, two infinite tables. 
Table 3*1 and Table 3*2 are needed. They can be specified 
finitely by algorithms to generate the ^(taember of a table at 
the m-th row and n-th column, given m and n. From the non- 
foxnal descriptions that we have given, such algorithms can 
be derived without difficulty. 

Note 2 : The construction in the theoroa is only to show the 
existence of an infinite set of dt's to take care of all 
texmlnating computations of a loop pxogram. Other than ILlo, 
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the construction is of little value. It adds no Insight 
Into the understanding of the program computation as the 
n-th dt Is built using the program Itself. In the next 
chapter, we shall see how these trees can be described more 
naturally and In a more Interesting manner in the context of 
an example. 

No te 5 ; It Is not possible to give an algorithm which when 
given an Input Instance of the prog3?am as Input, selects 
the decision tree that will be rule- equivalent to 
the program for that input instance. Because, such an 
algorithm will then be able to say that no such dt exists 
for an input instance leading to non -terminating computation. 
We know, however, that the problem of finding out if an input 
instance leads to non-terminating computation is undecidable. 

Note 4 ; The infinite set of dt's is reminiscent of the 
infinite set of approximations to a recursive program that 
Scott (1972) defines. The similarity stems from the fact 
that both these sets are results of all finite elaborations 
of a program. But there are two important differences. 
Firstly, there is no notion of the bottom element, | , 

in decision trees. Secondly, unlike the approximation, 
decision trees of a progreus do not form a chain under the 
relation £7 , where p £7 q iff the computational infoimation 
contained in p is also contained in q. 
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To illustrate let us consider a one-line program, 

S ; ^ q !:licu Uiile a do A od else while b ^ B od 
A and B are primitive statements for actions A and B respec- 
tively, Then, T' and T" will be both members of the set 
of decision trees corresponding to S. T* and T’* are shown 
in Pig. 3.14 (a) and 3.14 (b) respectively. 



Clearly, neitner T'C T" nor T"C T’ and so the 
decision trees do not form a chain underC^ . 





CHAPTER IV 


GBNBRATIHG RULE SETS FOR PROGRAMS 


4.1 Introduction : 

We Introduce in this chapter the notion of generating 
rule sets to specify algorithms by means of dt's. Given a 
valid input instance, a generating rule set Mil specify a 
dt. When this dt is executed on the input instance, the 
output obtained is the output defined for the given input 
instance. This way, a set of dt's, that can be generated 
by a generating rule set, can be employed to specify an 
input-output mapping. We have seen, however, in Section 
3*4 of the last chapter, that dt's are interchangeable with 
decision tables. In effect then, the present chapter answers 
the Xciuestlon raised in Chapter I as to how we can specify 
algorithms by means of sets of decision tables. 

To relate generating rule sets to programs, we shall 
define when a generating rule set can be said to be for a 
given program. A generating rule set for a progrsim will 
specify the seune input-output mapping as the program does. 

We shall see that a generating rule set exists for any 
program that terminates on all of its valid input instances. 
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To illustrate the notion of generating rule sets, we 
shall furnish two generating rule sets for a small but non- 
trivial program, called PARTITION. We shall justify the 
first rule set to be indeed for PARTITION and shall show 
that the second generating rule set to be equivalent to the 
first one. This second rule set will be found to be inte- 
resting as the vinderlying strategy of PARTITION can be 
explained in its terms, 

4, 2 Generating Rule Sets ; 

We know from Section 3.7 of the last chapter, that 
we can associate with any given program S, a recursively enu- 
merable infinite set of dt's, such that if S terminates on 
an input I, then there exists a dt in the set which specifies 
the same output as S does. Let us term this dt as the 
appropriate dt for I (in the context of program S). We, 
therefore, see the following possibility for specifying the 
input -output mapping of S in terms of dt's : given an input 
I, its appropriate dt is constructed which is then executed 
to obtain the output for I. A generating rule set for a 
program constructs these appiopriate dt’s. 

It is possible for some local variables of a progiam 
to become redundant in the dt's of the program. (The dt of 
Pig. 3.8 has two such redundant local variables, x’ and y' . 
Pig. 3.9 is the optimized version of the dt in Pig. 3.8 
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obtained by eliminating x’ and y‘). It may, therefore, be 
more convenient to construct dt's where redundant local 
variables do not occur. For this reason, we shall let 

generating rule sets construct dt*s which are equivalent 

, 1 -^ 

within optimization to appropriate dt's. 

Now, we can give the following definition of generat- 
ing rule sets. A generating rule set for a •program P is 
defined to be a finite set of rules which, when given a 
valid input instance I of P, constructs a dt 13^, where 
Dj is either a dt of P or is equivalent 'within optimization 
to a dt of P, such .that the same output is specified for 
I by both and P. 

An implication of the above definition is that we 
cannot have a generating rule set for a program P, the execu- 
tion of which does not terminate on some valid input, say 
I, Because, the output of I according to P is undefined, 
whereas such would not be the case according to the dt that 
would be generated by a generating rule set for P, had it 
existed. This reflects the fact that no dt, due to its finite 
nature, can capture non-terminating computations that a 
program may invoke. In other words, a necessary condition 
for the existence of a generating rule set for a program P 
is that it teiminatey on all valid inputs. This rules out the 
possibility of an algorithm which will output a generating 
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rule set, when it exists, for an input program, because 
the necessary condition above is undecidable. 

The necessary condition is also sufficient. This wo 
can establish by means of a trivial set of generating rules 
given below. 

Let P be a program that terminates on each valid 
input. Let I be a given input instance of P. If P be a 
loopless program then the trivial generating rule set 
constructs the dt of P. On the other hand, if P is a loop 
program then it is assumed , without loss of generality^ that 
P is written in ^e simple general purpose language described 
in the proof of theorem 3.2, P is executed on I under 
observation to see how many times each while loop is 
executed. Then we obtain a finite elaboration of P by 
unwrapping each while loop as many times as it has been 
executed. Then, the dt of this finite elaboration is cons- 
tructed, The description of the generating rule set ends here. 

It is obvious that the dt produced by the above rules 
will give the ssuno result when executed on I, as P would. 
Therefore, we have a generating rule set for P, albeit 
trivial. 

We can conclude from the above that there exists a 
generating rule set for every program that terminates on each 
of its valid inputs. For such a program P, we can obtain the 
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output of P on an input instance I by first generating the 
dt for I from the generating rule set for P and then execut- 
ing the dt on I. Like programs then, generating rule sets 
specify mappings from the input domain to the output range. 
But, generating rule sets are more restrictive than pro- 
grams because the former cannov invoke non-terminating 
computations which the latter may. However, the usual 
domain of discourse is the domain of correct programs and 
a correct program necessarily terminates on each valid 
input. Therefore, a generating rule set exists for every 
correct program. Thus we see that the generating rule sets 
are general enough. 

Next, we note that wo can give more than one gene- 
rating rule sets for the same program, though the set of 
dt's of the program is unique. 

4.3 Example-Program PARTITION : 

We shall consider a program to illustrate the con- 
cept of generating rule sets and to show how to ar^o about 
them. Our example program is PARTITION which forms an 
important part of the renowned QUICKSORT program of Hoare. 
Following is the listing of PARTITION: 

We rule out the possibility that the process of cons- 
tructing a dt by a generating rule set is itself non- 
terminating. 
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program PARTITION (A, n) 
i := ll j := m 
V := A[j]» up ;= true i 
loop ; if up 

then if A[i] ^ v 

then A[j] := A[i]j up ;= false f i j 
else if V ^ A[j] 

then A[i] A[3]| up := true fi » 

Hi 

if up then i ;= i+1 else j := j-1 fi t 
while i < j repeat t 
A[J] :s= vi endprogram « 

The above version is taken from Knuth (1974) with a 
couple of minor modifications. What the program does is to 
permute the array A of n elements in the following manner. 
Suppose A[n] of the original array is permuted to the posi- 
tion A[j]. Then all elements of A which are loss than A[n] 
of the original array will be in positions A[l] through 
A[j-1] in the permuted array and those elements (other than 
A[n] itself) which are greater than or equal to A[n] of the 
original array will be in positions A[j+1] through A[n] in 
the permuted array. • We shall refer to this action as 
partitioning A[l«.n]^ across ACu]* 

1 Prom here on, we use the notation A[m,.n] to denote a 
subarray A[m] through A[n]. 
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4.4 A Generating Rule Set for PARTITION ; 

In this section, we describe a generating rule set 
for our example program PARTITION, Rather than generating 
dt's, the rule set described here specifies the appropriate 
dt’s. The specification, however, is such that an algorithm, 
to construct an appropriate dt from the root downwards, 
follows obviously. 

Three of the four local variables of PARTITION, 
namely, i, j^and up^do not occur in the dt's specified by 
the rule set. This is because these variables become redun- 
dant in the dt's of PARTITION. The generating rule set 
describes the optimized versions of the dt's of PARTITION 
with the redundant local variables eliminated, 

A v£j,id input to PARTITION consists of an integer n, 
n i 2 and an array A of size n. Given such an input instance, 
the generating rule set described here specifics a dt named 
for the input instance. The decision and the action 
parts are specified separately by meams of the following 
rules: 

Generating Rules for the Decision Part of I^' 

Rule A I The root of is the test 


A[l] > A[n] 
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Rule B ; Every test node Q at level m, m l n-.3, will have 
test nodes as the sons. (Level 0 has the root). Let Q-p 
denote the test node at the F branch of Q and at the 
T branch of Q. Qj, and Q^, are specified as follows; 

Case (a) ; Let Q be A[ index] h. A[n]. Then Qp will test 
A[index + 1] 1 A[n] and Qg, will test A[n] ^ A[index2 -1], 
where index2 is defined as follows. 

Subcase 1 : Let the path from the root to Q take the T 
branch from at least one node. Let Qp denote the last^ 
of such nodes. Then, index2 is the index of that element 
of A which is con^ared against A[n] in Q^. 

Subcase 2 ; If the path from the root to Q does not take the 
T branch from any of the test nodes, then index2 is n. 

Case (b) ; Let Q be A[n] > A[ index]. Then Qp will test 
A[n] > A[ index-1] and Qg, will test A[index2 +1] L A[n]^ where 
indcx2 is defined as follows. 

Lot the path from the root to Q take the last T branch 
from node Qp. Then index2 is the index of that element of A 
which is compared against A[n] in Qp. 

The T and P branches of any test node at level n-2 

1 In other words, the path from the root to Q takes T 
branch from Qj^ and P branch fiom each of the nodes 
following Qp till the path reaches Q. 
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are incident of action sequences (which will be described 
next ) . 

It can be seen that the decision part will have (n-1) 
levels of test nodes, and these will form a complete binaiy 
tree of (n-1) levels. Also, there are only two forms of 
tests which are: A[ index] ^ A[n] or A[n] > A[ index] 

Action Part Rules ; 

The action sequence a, appended to a decision sequence 
6 in I^, is specified as follows. 

Rule A : The first assignment in a is 

V := A[n] 

Rule B ; The r-th assignment in the sequence a, when this 
is not the first or the last of a is given as 

A[p] ;= A[q] 

where A[p] is the right-hand side of the (r-l)-th assignment 
and A[q] is that element of A which is compared against A[n] 
in the test node Q, Q is identified as follows. Q is the 
test node such that, in the decision sequence 6, the (r-1) th 
T branch from the beginning of the sequence is taken from 
the test node Q. 

Rule C; The last assignment of a is 


A[r] ;= V 
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where A[r] is the right ^land side of the last but one assign- 
cf a, 

(From the above, it is clear that we can construct a 
by scanning 6 from the beginning to the end. It is also 
apparent that there will be no B rule assignments if 6 takes 
no T branches). 

Fig. 4.1 shows the dt that ;(l8 specified by the 
above generating rule set, when the input array A has 
4 elements. 

4 . 5 Justifying the Generating Rule Set ; 

Let P be a program, G- a generating rule set and 
Dj- pe the dt generated by G given I, a valid input instance 
cf P. It follows from the definitions that to show ifle G 
to be for P, we need to demonstrate the following for every 
x; 

(a) Either Lj itsol^ora dt to which is equivalent 
within optimization, is obtainable from (i.e.,rulo oqaivalenL 
to) a loopless flowchart which is one of the finite elabora- 
tions of ?, 

(The above is equivale^xt to: 

(a') is the dt of either a finite elaboration of P or 

of a fHowcut. rt ’Ahich is the optimized version of a finite 

elaboration of P*, ) 

Cind 
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(b) The above finite elaboration and P are strongly 
equivalent for I. 

In general, a rigorous proof to this effect is diffi- 
cult. The difficulty is not unexpected because such a 
proof not only establishes that two dissimilar specifica- 
tion devices (i.e.^a program and a generating rule set) 
specifies the same input-output mapping but also that they 
do so using essentially the same tests and actions. 

In the present case, we shall use informal means to 
show that the goneirating rule set given in the last section 
is indeed for PARTITION. 

Let Ijj denote a valid input to PARTITION where the 
array A is of size n, n ^ 2. For any 1^^, the while loopy 
body^ of PARTITION is exercised exactly (n-1) times. Therefore 
for Ijj, the finite elaboration of PARTITION, obtained by 
unwrapping the; whxxe loop exactly (n-1) times, is strongly 
equivalent to PARTITION. Let denote this finite elabora- 
tion. Let be the flowchart obtained from after the 
application of Step 1 of the process of conversion of loop- 
less flow charts to dt's (Section 3.5). The local variables 
i, j and up are such that they can be eliminated from C^. 

(as explained in Section 3.2), Let be the optimized / 

version of Cj^ (and therefore, of Ej^) after the elimination of 

1 For convenience, we shall refer to the 'loop. . .while. . . 
repeat' construct of PARTITION simply as the while loop. 
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i, j and up. It is our contention that the dt that would 

he generated for by the generating rule set, is same as 

the dt of Cjj. Because every valid input instance of 
PARTITION can be described by 1^^ for some value of n, if 

we show that the above contention is true, then we will have 

established that the generating rule set is indeed for 
PARTITION by having fulfilled (a') and (b) above. 

We establish the sameness of and by showing 

separately the sameness of the decision parts and the action 
parts of the two trees. Before we proceed, the following 
remark is necessary. 

A complete path^ in reflects an execution of 
PARTITION in the sense that such a path is an optimized 
version of a feasible trace of PARTITION. Moreover, every 
node in is the manifestation of one and only one node 
in a node in in turn is the manifestation of some 
test or action in some execution of PARTITION. Thus, it is 
possible to define in terms of various executions of 

j 4- 

PARTITION. Once we can identify in this manner, we 
shall be able to show its sameness with 

First of all, let us see what is like. We can 
assert the following about eveiiy complete path in 

1 that is, a path that a complete execution may follow. 
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(1) It starts with the assignment v;= A[n], therefore 
the node containing this action is the start node of 

(2) It has (n-1) tests, each of which is either of the 
form A[ index] 1 v or of the form v > A[ index]. The fomer 

is the manifestation of the test A[i] ^ v in PARTITION^ while 
the latter is the manifestation of v > A[3]. 

(3) It has zero or more assignments assigning one array 
element to another. These assignments are the manifesta- 
tion of A[i] := ACj] and A[j] := A[i] occurring in PARTITION, 

(4) It ends with an assignment assigning v to some array 
element. 

Next, in PARTITION it can be seen that once v is 
defined, the definition does not change in the course of 
any execution, therefore, in v has always the same value, 
namely A[n], after it is defined. Moreover, in PARTITION 
the variables i and j change in such a way that if an assign- 
ment changes the contents of an array ielement in the course 
of an execution, then no subsequent test in that execution 
will involve the array element. 

The above has the following important implication. Let 
Q’ be a test in which manifests as Q in 0^^ . Then, if 
Q' tests A[ index] 1 v, Q will test A[index] A[n] and if 

Q* tests V > aC index] ^ then Q will test A[n] > A[ index]. 

Thus, the effect of moving the assignments across the teste 
in can so easily be reckoned with. 
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We j^soe, therefore, th?.t each test of is either 
of the form A[index] > A[n] or of the form A[n] > A[ index]. 
This is true also of D^, Moreover, the decision part of 

dif 

^n * 11^® that of is a complete binary tree with (n-1) 
levels because every complete path of contains exactly 
(n-1) tests. 

Let us now consider a test node Q of which is at 
a level m, m < n - 2. The root is at level zero . In particu- 
lar, let us assume that Q tests A[index] lA[n], Because 
there are n-1 levels in the decision part of the T and 

P branches of Q will be incident on two tests j let these 
tests be and Qj, respectively. Lot Q' , Q^^and bo the 
tests in which manifest as Q, and Qj, ^respectively in 
Cjj . Clearly Q' will test A[ index] > v, qL will be the 

I 't ^ 

first tost node; encountered following the T branch of Q' 
and similarly, Qp will be the first test node following 
the P branch of Q' . 

The process of elimination of local variables will 
render^ the following property to to any node in 
there will be one and only one path from the start node. Let 
p be the path to Q’ from the start node. We can see that if 
we traverse this path, Q* will be the (m+l)-th test node. 

The path p then reflects an unfinished execution of 

1 We recall that is the optimized version of in 
which every node has only one incident edge. 
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partition where m of the total (n-1) iterations of the while 
Icfop are over and the execution is testing A[i] 1 v (which 
manifests as Q* in and as Q in c“ ) in its (m+l)-th 
iteration. We shall call this unfinished execution as 
p-execution. 

Let the variables i and j have values i* and j* 
respectively when p-execution alters the (m+l)-th iteration 
of the while loop. In order that a test in this iteration 
^ be manifested as Q which is A[ index] A[n], clearly up 
must have been true and i* must be the value index when 
p-execution enters the (m+l)-th iteration of the while 
loop. Depending on the two possible outcomes of the test 
A[i] i V made in this iteration, p-execution can be extended 
in two different ways. Firstly, if A[i] ^ v (in equivalently, 
A.[i*] L ■’') is found false, then up remains true, i is incre- 
mented by 1 and therefore the test A[i*+1] ^ v is made in 
the (m+2)-th while loop iteration. This test manifests as 
Qp Cjj and Qj, in Therefore, will be Afindex +1] ^ v 

and Qj, will be A[index +1] > A[n]. Thus, we have been able 
to define Qp. Now, we need to define Q^,. 

Qrp is accounted for by the other possible extension 
of p-exocution. If p-execution finds A[i*] i v true, then 
up is made false, j is decremented by 1 to have the value 
-1. The (m+2)-th iteration of the while loop will then 
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check V > This test is manifested as in and 

Qg, in Therefore, Qg, will be A[n] > A[d*-1]. To define 

Qg, completely, we need to know the value of j*. This value 
depends on the following two cases of p-execution. 

Case 1 : Each while loop iteration in p-execution has tested 
A[i] 1 V (rather than v > A[j]). 

Case 2 : Negation of the above, that is, v > A[j] has been 
tested in at least one iteration. 

In PARTITION, the while loop body in one iteration 
tests either A[i] 2: v or v ^ A[j]. The test A[i] ^ v is 
continued to be made in successive iterations, so long these 
tests are found false. If, in one iteration A[i] ^ v is 

found true, then the test v s* A[j] is made in the next 

iteration. Similar is the case with the test v > A[j]. The 
first iteration necessarily makes the test A[i] ^ v. Thus 
we see. Case 1 will hold iff p-execution has found, in each 
of the m executions of while loop which it has completed, 
that A[i] ^ V is false. In such a case, p-execution has 

never had any occasion to update j and so j* for Case 1 

is equal to n, the value with which j was initialized. 

The path p will reflect Case 1 of p-execution if p 
has tsiken the P branch from each test. Therefore, if the 
path to Q in from the ixjot takes F branch from each 
test node, then Qgi is A[n] > A[n-1]. (We recall that Qgi is 
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A[n] > A[j*-1]). Next, let us consider Case 2 of p-execu- 
tion. 

If Case 2 holds for p-execution, then, let m' he the 
last iteration of while loop in p-execution^ where the test 
V > A[j] has been made. This test must have been found 
true, else in (m' + l)-th iteration also the test v > A[j] 
would have been made rendering the assumption that m' is 
the last iteration to make such a test, false. Prom a 
similar reasoning, the tests A[i] ^ v made in iterations 
(m'+l) through m-th all must have been found false. This 
implies that j would not have been updated since the m'-th 

iteration till p-execution enters the (m+l)-th iteration of 

> 

the while loop. In other words, j has the value of j 
which was used to make the test v > A[j] in the m'-th 
iteration. Clearly, this test is manifested in p as the 
last test from which p has taken the T branch in traversing 
from the start node to Q Let this test be v > A[index2], 
(This test could not have been in the other possible form 
as Q' is A[ index] ^ v) . Therefore, j* is reflected in p as 
index2. Therefore, Q|J, is v > A[index2-1], This implies that 
Q is A[n] > A[index2-1] where A[n] > A[index2] is the last 
test in the path from the root to Q in C“ from which the T 
branch has been taken. To summarize, we can say that if 
the path from the root to Q in takes at least one T 
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branch, and if A[index2] is compared against A[n] in the 
last test from which the path takes the T branch, then 
will be A[n] > A[index2-1]. If the path from the root to 
Q in does not take any T branch, then 0^, is A[n] > A[n-1], 


Now we can make the following three points; 

1, If Q a test node in testing A[ index] ^ A[n] 
and is at a level m, m <n-2, then we have seen what its 

C-' » 

two sons Qip and Qj, will be. If we now compare these with 
the sons of a node A[ index] 1 A[n] in at a level m, we 
see readily that both the T branch sons and P branch sons 
of A[ index] 1 A[n] in and are identical, Wc can show 
the same when Q is of the form A[n] > A[ index], 

2, Next, we note that the roots of both and arc 

same. This is because PARTITION tests A[i] 1 v in the 
first while loop iteration with i set to 1. Thus A[l] 1 A[n] 

j 4- 

becomes the root of and we know that the same test is 
made at the root of 

d*t) 

3, We have also seen that decision part of each of 
and is complete binary treo with n-1 levels. 


Prom 1, 2 and 3 above, 
parts of and are same. 

Having established the 
of and what is left is 


it follows that the decision 

sameness of the decision part' 
to show that the action parts 
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of the two dt's are also same. Let us consider any complete 
path p in Let 6 and a be respectively the decision part 

and the action part of p. Because c“ is the dt of 
there exists a complete path p' such that p is rule 

equivalent to p* • We know, however, that every complete 
path in reflects and execution of PARTITION, Let p’- 
execution be the execution of PARTITION which is reflected 
in p’ , Thus, p'-execution accounts for p and we shall be 
able to specify a by examining this execution. 

Because of the relationship between p and p’ , a is 
the sequence of assignments in p' encountered when wo tra- 
verse p' from its beginning to the end. As every complete 
path in starts with the assignment v ;= A[nJ, this will 
be the first assignment of a. The assignment A[j] := v,madc 
at the end of p* -execution manifests as the last assignment 
of p' and therefore, of a. Let us call the rest of the 
assignments (if any) of p' as the middle assignments , Those 
are the manifestations of A[j] ;= A[i] and A[i] := A[3] 
made in the course of p' -execution. These assignments are 
made in the while loop and at most one of such assignments 
can be made in one iteration of the while loop. Moreover, 
in p'-execution, such an assignment may be made only imme- 
diately after testing A[i] t v or v > A[ j]. The assignment 
A[j] := A[i] is made in an iteration of the while loop iff 
A[i] i V is tested in the Iteration and found true. The 
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assignment A[i] := A[o] is similarly related to the test 
V > A[d]. 

In p* , therefore, every T branch that p’ takes 
is incident on a middle assignment and every middle assign- 
ment of p’ has a ^ branch incident on it. Now, we shall 
specify a middle assignment in terms of the test, the T 
branch of which is incident on the assignment and in terms 
of the path that leads to this test. 

Let Q be a test from which p' takes the T branch smd 
let Aq be the middle assignment at the T branch of Q. In 
particular, let Q be A[index] ^ v. Let Q be the m-th test 
from the beginning of the path p* . Clearly then, p’-exocu- 
tion has made the test A[i] i v in the m-th iteration of 
the while loop and found it to be true. As a result, imme- 
diately after the test is made, p' -execution makes the assign- 
ment A[j] 1 = A[i] which manifests as Aq. 

Let i* and j * be the values of i and j respectively 
when p' -execution has entered the m-th while loop iteration, 

Aq is then the assignment A[j*] := A[i*]* From the foim of 
Q we know the value of i* to bo index. The value of j ” , as 
we have established before, can be either, 

(1) n, if no T branch is taken from any test in the path 
from the start node to Q, or 
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(2) index2, if the last T branch taken, in traversing 
the path from the start node to Q, has been from a test 
comparing A[index2] against v. (The T branch is taken 
necessarily from a test of the form v A[index2] rather 
than A[indGx2] i v). 

If (1) holds, then the only assignment in p' proceed- 
ing Aq is V := A[n]. On the other hand, if (2) holds, there 
is a middle assignment preceding Aq in p' and that middle 
assignment assigns A[index2] to some other array element 
to manifest A[i] ;= A[j] in PARTITION. In either case 
therefore^ we can specify Aq as follows: 

The left-hand side of Aq is the right-hand side of 
the assignment that immediately precedes Aq in p' and the 
right-hand side of Aq is the array element which is compared 
against v in Q. 

We can establish in a similar manner that the same 
specification for Aq holds even when Q is of the other 
possible form, namely v A[ index]. 

What we have achieved is to specify the middle assign- 
ments of p' in terms of the tests in p' . The first assign- 
ment of p' is V ;= A[n]. Therefore, we now can construct 
the sequence of assignments ^except the last one ^simply by 
examining the tests in p* . 
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The last assignment is the manifestation of A[j] := v 
made by ^ARTITION after completing the while loop. At that 
time, i and j have the same value and let that value be k 
for p' -execution. It can be established that the value of 
k will be n if there is no middle assignment in pV else 

't-C 

it will be index where ilast of the middle assignment assigns 
A [index]. 

We now have a specification of the sequence of assign- 
ments in p' in terms of the tests in p*. We know that the 
sequence of tests in p' gives rise to the sequence of tests 
6 when v is replaced with A[n] in the tests. Thus^ in effect 
what we have, is the specification of a (which is same as the 
sequence of assignments in p' ) in terms of 6. (a is the 
action sequence of 6 in C“^). 

j 4- 

We have seen that the decision parts of c” and 
are same. Because of this, for every decision sequence 6 

JO. 

in c“ , there exists an identical decision sequence in 
Let Uq and be the action sequences connected to the same 
decision sequence 6 in and respectively. We have 
seen how can be specified for a given 6. If we compare 
this specification with the rules that generate action 
strings of I^» we see that Uq and will be identical for 
every 6. This implies that the action parts of and 
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also are same. Therefore, and are same. This com- 
pletes our informal proof that the generating rule set given 
in the last section is indeed for PARTITION. 

4.6 Another Generating Rule Set for PARTITION : 

We have given a generating rule set for PARTITION in 
Section 4.4. Another generating rule set is given in this 
section. We shall find this rule set to be an interesting 
one as we can employ it to explain the underlying strategy 
of PARTITION. Given a valid input instance of PARTITION, 
i.e., an integer n, n 1 2 and an array A of size n, the 
present rule set constructs the dt by using the following 
two rules. 

Rule A ; 

For n = 2, the dt Dg is constructed as given in 
Pig. 4.2. 



A[2];=:v A[2];=A[1] 

A[1]:=v 

Fig. 4.2; The decision tree J) 2 > 




177 


Rule B ; 

For n ^ 2, the dt is obtained from using 

the following: 

bl : The root of is the test node which tests 

A[1J > A[n+1] 

b2 : The dt mapl (Dj^) is attached to the P branch of the 

root node and the dt flip* rev* map 2 •mapl is 
attached to the T branch of the root node.^ 

mapl, map2, rev and flip are four functions from dt*s to 
dt's which are described below, 

manl: The dt mapl(Dj^) is obtained from by substituting 

each occurrence of A[k] in with A[k+1], for all k, 

1 1 k 1 n. 

man 2 : The dt map2,mapl( is obtained from mapl(Djj) by 

substituting in mapl(I^) every occurrence of A[k] with 
A[n+2-k], for all k in the range 2 £ k £ n. 

(In mapl(I^) the indices of A range from 2 to n+1, 
map2 leaves A[n+1] as it is and replaces each element in 
the range A[2] through A[n] by what we may call its mirror 
image, with the mirror placed after A[n]). 

1 The dot denotes function composition. Thus, the dt attached 
to the T branch of the root is flip (rev(map2(mapl(D )))), 
The use of dot relieves us from using so many parentnes^s. 
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rev; This function acts only on the decision part of a dt. 

Its effect is to substitute, in every test node of the 
argument tree, the predicate being tested with the negation 
of the predicate. 

(Thus, if a test node is testing A[p] 1 A[q], the 
effect of rev will be to make the test node tost A[qJ > A[p]). 

flip. ; This function acts exclusively on the action sequences. 
The first two assignments of every action sequence in 
revmap2*mapl(Djj) are of the form 

V := A[n+1] 

A[n+1] ;= X 

where x is either an array element or v, V/hat flip does, when 
acting on revmap2*mapl(D^) , is to replace in every action 
sequence of the argument tree, the above two assignments with 
the following three; 

V ;= A[n+1] 

A{n+1] ;= A[l] 

A[l] ;= X 

This completes the description of the second generating 
rule set for PARTITION. We can see that the present rule set 
builds the dt's inductively with D 2 as the base. 

Pig. 4.5 shows Dj. Figures 4.4, 4.5» 4. 6^ and 4.7 respec- 
tively show mapl(Dj), map2*mapl(Dj) , revmap2*mapl(D^), and 
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flip • rev map2 • inapl( Dj ) . We can see that the dt of Pig, 4.4 
is the P branch subtree at the root of given in Pig. 4.1. 
The dt of Pig. 4.7 is the T branch subtree at the root of 

4 . 7 Equivalence of the Two Generating Rule Sets ; 

Let us call the generating rule set given in Sec. 5. 4 
as the first generating rule set and the one given in Sec, 5. 6 
as the second generating rule set . In the present section, 
we shall prove that the two are equivalent in the sense that 
for every input instance given, the two dt*s generated by 
the two rule sets are same. 

We know that an input instance to either of the 

generating rule sets consists of a positive integer n, n i 2 

and an arraiy A of size n. Moreover, for a given n, each of 

the rule sets builds the same dt for every input array 

1 2 

having the size n. Let and denote the two dt's gene- 
rated respectively by the first and the second generating 
rule set. Therefore, to prove the equivalence of the two 
rule sets, we are required to show that and are same, 
for each n 1 2. This we do by induction on n, with the base 
as n s 2. 

1 2 

The base case can be proved by building' and 
and then verifying that they are the same dt. 
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For the induction step, let us assume that IT*' and 

n n 

are same till some value of n. We shall then prove that S) 
and are also same. We shall consider the decision 

and the action parts separately to prove the sameness. 

Let us first define the address of a test node in a 
dt. The decision part of a dt is a rooted binary tree, 
therefore, every node in it can be identified uniquely in 
terms of the path from the root to that node. Such a path 
can be represented by the sequence of T and P branches taken 
to reach the node. The address of a node is this sequence. 
Let Q be a test node and let ad (Q) denote its address. We 
can define ad (Q) as follows: 

If Q is the root node, then ad (Q) is the empty 
sequence. 

If Q is not the root node, then it has a father; 
let the father of Q be O'. Then, 

ad(Q) = ad (QO T 

if Q is at the T branch of Q*, else, 

ad(Q) = ad (O’) P 

Clearly, the address of a node in a binary tree 
uniquely identifies the position of the node. Therefore, to 
prove the sameness of the decision parts of ^+1 and ®n+l’ 
we need to show for any test node in either of the dt’s. 




184 


there exists a test node in the other dt which is at the same 
address as that of the former test node and the two test 
nodes test the same predicate. 

2 2 

Of the four functions used to obtain from D , 

n+l n 

flip has no role to play in the decision part. To talk about 
the effect of the other three functions on the individual 
test nodes, let us define mapl' , map2'jand rev' corresponding 
to mapl, map 2 and rev. For any test node Q in the argument 
dt D, let mapl'(Q) denote the node in mapl(D) which is at the 
same address as that of Q, Similarly map 2’ and rev' are 
defined. 

It can be readily shown that the decision part of the 
either or ^ complete binary tree of n levels. 

Both the decision parts have as the root identical test 
nodes, testing the predicate A[l] iA[n+l]. 

The T and F branch sons of the root in are respec- 
tively the teste A[n+1] ^ A[n] and A[2] ^ A[n+1]. 

Now, from the second generating rule set, the T and 

F branch sons of the root of are respectively 

rev' •inap2' •mapl' (A[1] i A[n]) and mapl'(A[l] iA[n]). (The 

root of is same as that of I^, from the inductive hypothesis, 

and that is A[l] lA[n]). From the definition of the functions, 

2 

we get the T and F branch sons of the root of as 
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A[n+1] > A[n] and A[2] ^A[n+1] respectively. These tally 
with the sons of the root of ^+1* Therefore, up to level 1, 
the decision parts of ^+1 same. (The root of 

a tree is at level zero). Now we are ready to have an 
induction on the level. 

Let us assume that the decision parts of and 

2 

^n+1 are same upto level m, m <_n-2. This implies that for 
any node Q at the level m or less in 

4+1- at the same address as that of Q test the same test, 
as Q. In particular, let Q be the test^ A[p] ^A[n+1] located 
in the T branch subtree of the root, let and Qp respec- 
tively be the T branch and f branch sons of Q. Let Q', 
and be respectively the nodes in which are at the 
same addresses as those of Q, Qq, and Qp. 

jProm our assumption that decision parts of and 

2 

^+1 Same till level ra, we have that Q’ is also the 
test A[p] 1 A[n+1]. 

Now, we know from the second generating rule set 

2 

that the node Q is derived from a node Q" in satisfying 
the following relation: 

Q = rev' *map2’ ‘inapl' (Q*). 

1 In either~^^ 2 _ or teste occur only in two forms. 

One is A[p] 1 A[n+1] and the other is A[n+1] > A[p], 
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let us denote the T and the P branch sons of Q” as and 
Q'^ respectively. 

Prom the definitions of rev', mapl'^and map2' , we 

2 

obtain Q" as the node testing A[n] > A[n+l-p]. Because 
and both are same from the inductive hypothesis, we can 
use the first generating rule set to obtain the two sons of 
Q". Let the last T branch taken in the path from the root 
to Q” in be from the node Qj^ where Qj^ tests A[r] _> A[n]. 

(It can be seen that Qj^ test cannot be of the other form, 
namely, A[n] ^ A[r]). Therefore, the first generating rule 
set defines Q^' and respectively as A[r+1] i A[n] and 
A[n] > A[n-p], However, we know that 

Qj = rev' •map2' •mapl' (Qj?) 

and Qp = rev' •map2' ‘mapl’ (Qp. 

Using the definitions of rev',map2', and mapl', we 
get Qj and Qp respectively as A[n+1] ^ A[n-r] and A[p+1] iA[n+l] . 

Let us now obtain Q^j, and Qp. The second generating 

2 

rule set is such that the address of Q in is the address 

p 

of Q* in preceded by a T. Therefore, rev' •map2' ‘mapl' (Qp) 
will be the node from which the last T branch is taken in the 
path from the root to Q in But this path is identical 

to the path from the root to Q' in as the decision 

parts of and have been assumed to be identical 
upto level m. Therefore, in the path from the root to Q' 




also, the last T branch is taken from the node which is 
identical to rev' •map2’ ‘mapl’ (Qg). This test simplifies to 
A[n+1] > A[n+l-r], We know that Q' is A[p] > A[n+1]. There- 
fore, the first generating rule set will define and Q|, 
respectively as A[n+1] > A[n-r] and A[p+1] ^A[n+1]. 

Therefore, we conclude that Q^, is same as Qj, and Qj, 

is same as Qp. Ve can show that same when Q is of the fom 

A[n+1] > A[p] or when Q is in the P branch subtree at the 
2 

root of Then it follows that the decision parts of 

1 2 

^n+l and \+l are identical till the (m+l)-th level. 

Prom the above, we can conclude that the decision 
1 2 

parts of and s^re identical. 

1 2 

Next, we show that the action parts of \+l 

are also same. Because the decision parts of these two dt's 

are same, for every decision sequence 6 in there 

2 

exists an identical decision sequence in vice-versa. 

To prove the sameness of the action parts, we need to show 

that the two action sequences, one in ]^^2 other in 

2 

^n+l* "to decision sequence, are same. This 

sameness will be shown by proving that any action sequence a 
appended to, say, 6 in D^^ 2 » be specified in terns of 
the first generating rule set, (That is, the action sequence 
02 » that would be built by the first generating rule set to 
follow 6, is same as a ). 
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Let ua assume that 6 (which is followed by a in 

2 

takes the T branch from the root of the decision part of 
A decision sequence is a sequence of tests leach of which is 
followed by a T or an P. The first test of 6 is the test at 
the root and this test is followed by a T. Let us obtain 
6' from 6 by deleting the first itest and the T following it. 

Prom the definition of the second generating rule set, 

a is the action sequence appended to the decision sequence 6' 

in flip*revmap2*mapl(D^) . As flip plays no role in the 

2 

decision part, the decision part of revmap2*mapl(D^) is same 
as that of flip*revmap2*mapl( . Thus, the decision se- 
quence 6' occurs also in revmap2*mapl( and let a* be the 
action sequence that is attached to o' in this dt. (We note 
that there can be no ambiguity in identifying 6' as two 
identical decision sequences cannot exit in the same dt). 

The functions rev, map2^and mapl only change the con- 
tents of the nodes in their argument tree, they do not add 
or delete nodes. We, therefore, can identify a complete path 
in D^, comprising .>off a decision sequence 6" , followed by an 
action sequence a" , such that the nodes of the complete path 
are changed due to the effects of rev', map2' and mapl' to 
obtain the complete path 6' followed by a' in the dt 
rev map2* mapl (Djj) . 
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2 1 

is same as from the induction hypothesis and 
therefore a" can be specified examining 6" according to 
the action part rules of the first generating rule set. 

These rules generate each action sequence of Let us 

obtain the changed action part rules by substituting 
A[n+1] for A[n] in the above mentioned rules. It can be seen 
that a' can be specified to follow 6' according to the changed 
action part rules. This follows from the following observa- 
tions; 

1. In revmap2*mapl(Dj^) , each test node compares A[n+1] 
against some other array element, and 

2, 6' takes T branch from a node Q iff 6 " takes T branch 

* 2 

from the node Q which is, in I|^, at the same address as that 
of Q in rev*map2*mapl(D^) . Let Q* test A[p] against A[n] 
and let the assignment which is accounted for by Q' (as T 
branch is taken from it by 6") be A* . We know from the 
rules that A* will assign A[p]. Let A be the assignment in 
revmap2*mapl( D^) which is derived from A* • Then, A will 
assign A[n+l-p]. However, Q will test (as it is derived 
from Q* ) the same element i.e., A[n+l-p] sigainst A[n+1], 

Now that we know how a' can be specified, let us go 
on to consider a. We can obtain a from a' by considering 
the effect of flip. The first two assignments of a* will 
be V := A[n+1] and A[n+1] x^where x is either v or some 
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array element, a is obtained from a' by replacing these two 
assignments with the three: v := A[n+l].j A[n+1] := A[l]f 
A[l] := X, The first T branching of 6 is from the root node 
where A[l] is compared against A[n+1]. We can see that the 
second assignment of a is accounted for by this T branching. 
Other T branchings of 6 are derived from the T branchings 
in 6* and therefore, their effects are already considered in 
a. Thus, the changed action part rules will specify a to 
follow 6. 

But the changed action part rules are the action part 

rules of the first generating rule set for ^IHI* Therefore, 

we conclude that the action sequence a which follows the 

2 

decision sequence 6 in is what the first generating rule 

set specifies to follow 6 in had assumed that 6 

takes the T branch from the root. The above conclusion 
follows even when 6 takes the F branch from the root. This 
establishes the sameness of the action parts of and 

We can then conclude that the first and the second 
generating rule set are equivalent. We have justified, in 
Section 4.5, the first generating rule set to be for 
PARTITION. We can now conclude from this section that the 
second generating rule set is also for PARTITION, as we had 
claimed. 
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4.8 Strategy of PARTITION ; 

To the working of PARTITION program, we can ascribe 
an underlying strategy which we shall discuss in the present 
section* We ,;^^shall see in Section 4.10 that this strategy 
is clearly reflected in the second generating rule set giyen 
in Section 4.6. 

We shall find it expedient to use the following nota- 
tion here and in Section 4.10. In the context of an array 
(or a subarray), v will denote one particular array (subarray) 
element. Any element of the array (subarray) which is smaller 
than V will be denoted by S, and any element other than v, 
which is greater than or equal to v will be denoted by L. 

Now, we describe the strategy. The crux of the strategy 
is how to partition A[l..n+1] across A[n+1] using the method 
of partitioning A[l..n] across A[n]. (What is meant by parti- 

r ' 

tioning an array or a subarray across one of its elements was 
explained in Section 4.3). 

Let V be A[n+1]. Then either A[l] is S or it is L. 

In the former case, leaving A[l] as it is, if we manage to 
•partition A[2..n+1] across A[n+1], we shall obtain the 
desired partition of A[l.*n+1]. 

If, on the other handjA[l] is L^then partitioning 
A[2..n+1] across A[n'fl] will necessi^te a subsequent shifting 
of elements to get an S at the position A[l]. The efficiency 
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of PARTITION results from the fact that it is able to avoid 
this shifting of elements by making use of what we call 
here a deviant partitioning . Deviant partitioning of 
A[2..n+1] across A[n+1] means to permute A[2..n+1] in such 
a Way that if v, taken as A[n+1], is permuted to the position 
A[k], then in the permuted array, A[2,.k-1] and Afn+ll 
contain only S elements and A[k+l,,n] contains only 1 elements, 

r 

In other words, deviant partitioning of A[2,.n+1] is like 
normal partitioning except that it will force an S element 
to occupy A[n+1] position in the permuted array. 

¥e contrast the two partitioning in Figure 4.8. (Boxes 

f* 

represent array positions, the number on top of a box indi- 
cates which position of the array the box represents.) 


1 


2 5 


k n-1 n n+1 

. . . H •• • Id i t pn 


(a) Result of normal partitioning of A[2,,n+1] 
across A[n+1]. 


12 3 k-1 n-1 n n+1 

rT-g"~T"5n ... pn... nrrirrr] 

(b) Result of deviant partitioning of A[2..n+lJ 
across A[n+1]. 


Fig. 4.8: Normal and Deviant Partitioning of 
A[2. .n+1]. 
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The efficacy of the fleviaht partitionijig is evident 

nil i ‘ 

from the above figure. Because, all now that is- iieed to be 
done to obtain the desired partitioning is to interchange 
A[l] and A[n+1], 

So, the strategy can be summarized as follov^s. If 
A[l] be S then partition A[2..n+1] across A[n+lj and quit. 

If A[l] be L then partition A[2,,n+1] across A[n+1] in the 
deviant way, interchange A[l] and A[n+1] and then quit. 

4.9 Two Principles for Getting New dt*s from Old Ones ; 

The second generating rule set, given in Sec. 4.6. 
makes use of four functions, namely, mapl, map2, rev^ and flip,, 
which obtain new dt's from the argument dt's. Of these fmc-- 
tions, the first three are based on the following two princi” 
pies which are general enou^ to merit separate mention. 

These principles arc self^^ evident, and j'Ot they are powerful 
enough to have wide applicability. 

Principle 1 : Let f be a function on dt's such that, while 

acting on a dt D, f substitutes each occurrence of w in D, 

for every simple^ variable w, with MAP(w) , MAP being a 

bijection from and to the set of simple variables of D. Then, 

1 By simple variables, we mean those which are not composed 
of other variables. Thus, the variables i,3,up, v, n in 
PARTITION are all simple. Aji] and A[j] are not, thou^ 
say A[3]» is a simple variable. 
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input-output mapping that is specified by f(D) can be 
obtained by sub^^tiuuiiiig MAP(w) for w in the input-output 
mapping specified by D. 

mapl and map2 are based on this principle. 

The statement of the next principle needs the following 
discussion, A decision sequence in a dt (i.e,, a path from 
the root of the dt to the frontier of the decision part of the 
dt) spells out an assertion. This assertion is to be satis- 
fied by an input instance so liiat the action sequence, follow- 

I ^ 

ing the decision sequence, can -be applicable to that input 
instance. 

Principle 2 ; Let D be a dt which specifies action sequence 
for the input satisfying assertion C^, for all i, 

1 i i n. Let MAP be a bijection from and to the sot of 
conditions, |ljli^n>. Let f be a function on dt’s 

tha+, acting cr. ?, Ica.'cs action ceqaences as they are in D 
but changes the decision part in such a way that in the resul- 
tant dt, f(I)), action sequence Aj^ is now specified for 
assertion MAP (Cj^) for all i, 1 < i < n. Then the action 
sequence, that is specified in f(D) for an input satisfying 

0 . is the same action sequence that is specified in D for 

^ ^ -1 
inputs satisfying assertion MAP" (Cj). 

rev is based on this principle. 
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4 . 10 Vorking of the Second Generating Rule Set ; 

Let Ljj denote the dt specified by the second generating 
rule set (Section 4.6) when the input array size is n, n 3 ^ 2. 
We shall see in this section how this dt partitions 

A[l..n] across A[n], making use of the strategy given in 
Section 4.8. We shall need certain properties of given 
below. 

Property 1; All reference to the array A in are made 
using the arrpy elements as simple variables. (In other words, 
there is no reference to an array element which is not 
explicit, as in, say, A[j], where J is some variable. 

Property 2 ; Every decision sequence of is made up of 
(n-1) test nodes in which A[n] is compared with A[l] through 
A[n-1] . 

That these proper ties of arc true for any n, n 2, 
can be proved by induction on n, with n = 2 as the base. The 
baSQ^ case is verified directly from Fig. 4.2 in Section 4.6. 
The induction step consists of showing that the generating 
rule set is such that these properties are inherited by 
^n+1' assuming them to hold good in 

Now, from the definition of mapl (which usee a 
bijection to substitute for the array elements- in D^), 

Property 1 of I^j,and from the Principle 1 of the last 
section, we can conclude the following: 
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Lemma 4.1 ; If partitions the array A[l. ,n] across A[n] then 
mapl(Dj^) partitions .n+1] across A[n+1]. 

Next, inmapl(D^) too, all references to the array A 
are made using the array elements as simple variables. This 
follows from Property 1 above which holds for and the 
fact that mapl(Dj^) is a part of Therefore, from the 

definition of map2, from Lemma 1 and Principle 1 of tho last 
section we obtain: 

Lemma 4.2 ; If partitions A[l..n] across A[n]^thon 
map2.mapl( D^) will permute A[2,.n+1] in the following manner: 
if A[n+1], taken as v, is permuted to tho position A[k], then 
in the permuted array, A[2. .k-1] and A[n+1] will hold only L 
elements and A[k+l..n] will hold only S elements, 

(The anamoly with respect to the position A[n+1] is 
because map2 maps A[n+1] to -^he same position, L and S elements 
were defined in Section 4.8). 

To illustrate, let us consider the trace of map2,mapl(D^) 
which is obtained when T branch from each of the test node is 
followed. (In mapl(D4), array elements A[2] through A[5] will 
occur, map2 will map A[2] to A[4], A[3j to A[3]» A[4] to A[2] 
and A[5] to A[5]). This trace will be followed whai the 
following is satisfied by an input instance: 

A[4] > A[5]» A[5] > A[2] and A[3] i A[5]. 
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Therefore, with v as A[5], A[4] is L, A[2] is S and A[3] 
js Tj. The act"’'''" that is specified in map2,mapl(D^) 

for the above case is the following sequence of assignments; 

v:= A[5]} A[5] := A[4]; A[4] := A[2]} A[2] :=A[3]5 
A[3] := V 

It can be seen that the above sequence of assignments 
will permute A[2..5] in the following manner. A[5] of the 
original array^i.e., v, will occupy position A[3] in the ' 

permuted array. A[2] and A[5] of the permuted array, each 
will have an L element, whereas the only S element will 
occupy position A[4]. This, it can be seen, is in accordance 
with the above lemma. 

Next, we examine the effect of rev. The generating 
rule set is such that every decision sequence is flip* rev map25 
mapl(Dj^)i when preceded by a test comparing A[l] with A[n+1], 
becomes a decls--.^ii in ''O which Property 2 is 

applicable. Therefore, every decision sequence in flip*rev 
inap2*mapl{Dj^) consists of (n-1) test nodes which compare A[2] 
thiough A[n] with A[n+1]. But the same is true of map2-mapl( 
as well, since rev and flip do not alter the elonents which 
are being tested in a test node. Frcmi the definition of rev 
and the above fact, it can be seen that rev is a function to 
which Principle 2 of the last section is applicable. Next, 
we note that the action sequence that follows a decision 
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sequence say 6 in map2*mapl(I)^) is same as the action 
sequence that follows 6' in rev • map2 • mapl ( ), where 6' is 
obtained from 5 by negating the predicate that is being 
tested in each of the tests in 5. That is why, what 
revmap2*mapl(Dj^) does to an S element is what map2*mapl(Dj^) 
does to an L element and vice-versa. From this discussion and 
Lemma 4.2, we obtain the following: 

Lemma 4.3 : If partitions A[l. .n] across A[n], then 
revmap2*mapl(Djj) partitions A[2..n+1] across A[n+1] in the 
deviant way. 

(Definition of deviant partitioning was given in 
Section 3.8) . 

To illustrate, let us consider the trace of revmap2- 
mapl(D^) which is obtained when T branch is taken from each 
of the test node of the dt. This will be the case when the 
following is true 

A[5] > A[4]» A[2] > A[5] and A[5] > A[3]. 

In other words, with A[5] as v, A[2] is L and A[3] and 
A[4] are S. The following sequence of assignments is the 
action sequence specified by revmap2*mapl(D^) : 

V ;= A[5]> A[5] A[4]i A[4] := A[2],. A[2] := A[3]> 

A[5] = V. 
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(We note that this assignment sequence is the same as that 
of the illustration following Lemma 4.2 and the assertions 
here are the negation of the assertions of that case). 

It can be seen that in the resultant pennuted array 
(due to the above sequence of assignments) there will be S 
elements in A[2] and A[5]» v i.e,, A[5] of the original array 
will be in position A[3] and A[4] will hold an L element. 

This clearly is the deviant partitioning of A[2.,5] across 
A[5]. 

Next, we shall see the effect of flip. We shall 
require the following property of revmap2*mapl( D^^) . The 
property can bo shown to be true by induction on n for 
revmap2*mapl(Djj) . (In fact it will suffice to prove the 
property for map2‘mapl (D^^) and to note that rev does not 
alter the action sequences). 

Property 3: Every action sequence in revmap2*mapl(Djj) 

permutes A[2,,n+1] in some fashion and eui array element 
occurs on the left-hand side of an assignment only once in 
the sequence of assignments. 

Prom the above property, and the definition of flip, 
it is possible to conclude: 

Lemma 4.4 : Let the array A become A' and A" respectively, 

when A is acted upon by revmap2«mapl( I^) and flip*rovmap2« 
mapl(Dj^). Then A" can be obtained from A' simply by 
interchanging A'[l] and A'[n+1]. 
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Now we can see that the strategy given in Section 4.8 
is implemented in the second generating rule set. 

Lemma 4.5 ; partitions A[l..n] across A[n], for all 
n, n i 2. 

Proof ; The proof is by induction on nj the base is for n = 2, 
for which the truth of the lemma can be verified directly 
from Figure 4.2 of Section 4.6. 

Let the lemma be true for some To prove the same 

for we note the root node of tests whether A[l] 

is S or L, taking A[n+1] as v. If A[l] is S, i.e., A[l] <A[n+l], 
then all we need to do is to partition A[2. .n+1] across A[n+1]. 
This is done by mapl(Dj^), (as we know from Lemma 1), which is 
made use of when A[l] is found to be S. 

If, on the other hand, A[l] is found to be L (i.e., 

A[l] i A[n+1]), the dt flip'revmap2*mapl(Djj) is invoked by 
the generatingp ' However, we know from Lemma 4.3 that 
revmap2*mapl( partitions A[2..n+1] across A[n+1] in 
the deviant way, therefore, using Lemma 4.4, we deduce that 
flip' rev* map 2. mapl(D^) will give the desired partition 
when A[l] of the input array is L, (End of proof). 

We can see then, that partitions A[l. .n+1] 

across A[n+lJ following the strategy given in Section 4.8. 
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In our experience, we had discovered the second 

s 

generating rule set when we were not aware of the strategy- 
given in Section 4.8, By examining a few optimized versions 
(hy eliminating i, j and up) of dt*s of PARTITION, we found 
that these dt's follow certain 'patterns'. It was not diffi- 
cult to capture these patterns in terms of rev, flip, map 2 and 
mapl. This led us immediately to the second generating rule 
set. When we tried to understand the working of this gene- 
rating rule set, we discovered the strategy given in Section 
4.8. The program PARTITION can be explained readily in terror 
of this strategy. Therefore, here we have an example where 
a generating rule set of a program has led to the underlying 
strategy of the program, in terms of which the program can 


be understood. 




CHAPTER V 


CONCLUDING REMARKS AND SUGGESTIONS FOR FURTHER WQRir 


This thesis has been based on the conviction that 
the property of test-action separation, found in decision 
tables, is an important concept in programming which must 
be exploited to the maximum extent possible. Because ’goto' 
as an action, explicitly or implicitly, destroys this pro- 
perty, our definition of decision table has excluded such 
an action. 

We have seen in Chapter I that many advantages of 
decision tables emanate from the property of test-action 
separation. ¥e have also noted the critical importance of 
assertion analysis in order to exploit many of these advan- 
tages. Because assertion analysis is undecidable in its 
general form, one is led to consider restricted classes of 
assertions. 

In this thesis, we have developed an algorithm to 
solve assertion analysis on an important restricted domain, 
namely, that of sets of linear constraints over variables 
that take only non -negative integer values, Suoh constraints 
abound in programming and specially in non-numeric applica- 
tions. Also, we have noted that conditions on character data 
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types with the notion of collating sequaice often translate 
to such constraints. Moreover, our algorithm assumes even 
greater applicability when we realize that an integer vari- 
able of unrestricted sign can be expressed as the difference 
of two variables taking only non-negative integer values. 

We could have used any of the standard integer pro- 
gramming technique;; for our restricted class of assertions. 

Yet we chose to develop a new algorithm because we wanted 
to exploit the likely abundance of very simple constraints 
in a typical decision table environment. For a given input 
instance, our algorithm captures the simple constraints in 
the so-called reduced network and the rest of the constraints, 
in an equivalent aggregate equation. The algorithm then 
uses a backtrack procedure to solve the aggregate equation, 
guided by the reduced netwoik to admit only those solutions 
that solve the entire set of given constraints. It can be 
seen from the algorithm how the reduced network is used 
effectively to cut down the solution space by using the 
lower bounds which are implied by the reduced network. 
Calculation of lower bounds for partial assignments (as 
considered by the backtrack procedure) is a very frequent 
task in our algorithm. An interesting aspect of the algori- 
thm is how this task is reduced to the task of updating 
lowei|bounds of a partial assignment considered previously 
by t^e backtrack procedure. Moreover, by employing the 
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LBAV matrix, we have been able to restrict the number of 
previously concidered partial assignments, whose lower 
bounds need to be remembered at any point, to a very small 
value, compared to the total number of partial assignments 
considered by the backtrack procedure. 

Another aspect of our algorithm, that merits mention 
here, is the use of GEN2 routine. This routine reduces the 
number of variables from which backtracking is necessary 
by one. This leads to appreciable saving in time. 6BN2 
will be of help wherever a backtrack procedure is used to 
find integer solutions of an equation, as done, o.g. , with 
the knapsack problem (Salkin (1975)). 

Detection of logical errors in decision tables^!. e., 
real ambiguity and real incompleteness, is of great impor- 
tance to decision-table users. It can be seen that a conclu- 
sion o f our thesis is that a reasonably efficient algorithm 
exists to detect logical errors in decision fables, whan 
the conditions are restricted to linear constraints of 
integer variables. 

The other problem that has been dealt with in this 
thesis is how algorithms can be specified using decision 
tables^ ere a single table is inadequate to specify the 
algo rithm^ without sacrificing the property of test-action 
separation. We have explored the possibility of using a 
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set of decision tables to specify an algorithm. The route 
that we have taken for this exploration is to relate 
programs to decision tables via decision trees (dt’s) 
which are interchangeable with decision tables. 

We have been able to show that any loopless flowchart 
can be converted to a meaning- preserving dt. Then we have 
shown that an infinite set of dt’s can capture all the 
terminating computations of any given program and that 
this infinite set is recursively enumerable. 

For the purpose of (finitely) specifying algorithms 
by means of infinite sets of dt’s, we have introduced the 
notion of generating rule sets. Such a specification 
exists for the input-output mapping of any program that 
terminates on all its valid input instances. To illustrate, 
we have furnished two generating rule sets for a small but 
non-trivial program. 

To specify algorithms by means of generating rule 
sets may be worth-*^hile on two counts. Firstly, we believe 
from our experience, that a sot of finite and very well- 
structured objects like dt’s may be easier to handle than 
a program^ while deriving properties of a computation. And 
secondly, as we have seen in the second generating rule sot, 
functions from dt’s to dt's based on self-evident principles 
can be made use of in generating rule sets. Surely, it is 
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an exciting prospect to design algorithms to i^ccify new 
input-output mappings by transforming known algorithms. 

Yet, little has been done in this area with ordinary 
programs. May be what is required is to restrict ourselves to 
more structured objects like decision trees. 

Our suggestions for further work are the following: 

1. An integrated system for assertion analysis needs to 
be developed which will be of immense help to dec is ion -table 
users. Such a system should have various modules for 
various important restricted classes of assertions. A 
possible choice of algorithms for the modules may be the 
following: the algorithm of Ibramsha and Rajaraman (1978) 
for linear constraints on real variables, 14ie algorithm of 
Shostak (1978) for character data -types that admit only 
equality predicate^and the algorithm presented in this thesis 
for linear constraints on integer variables. For (the rare) 
mixed -mode linear constraints, a mixed integer programming 
package may be included. Finally, for assertions not 
covered in the above categories, the system may use possibly 
non-terminating procedure used by Boyer et.al/ (1975). 

2, Our algorithm needs to aggregate all non-simple cons- 
traints. However, the algorithm may be modified, without 
much difficulty, so that the backtrack routine can solve a 
set of equations instead of a sin^e one. This will do away 
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with the aggregation of non-simple constraints. The extra 
work involved in the modified backtrack routine needs to 
be contrasted with the difficulty imposed by largo numbers 
which may result duo to aggregation. With enough compu- 
tational experience with the original and the modified 
algorithm, it will bo possible to d ccide when aggregation 
is desirable and when it is not. 

3. We need to develop a language, or at least a set of 
conventions, in which generating rule sets may be expressed 
conveniently and elegantly. Por this, wo need experience 
with many generating mile sots and this experience will 
hopefully lead us to useful constructs. 

4. In Section 4.9, we have seen two self-evident princi- 
ples which lead to useful functions from dt's to dt's. It 
will be worthwhile to discover more of such principles and 
show their use in generating rule sot specification. 

5. We need an appropriate formal system to talk about 
sets of dt's. Without this, proofs of equivalence of two 
generating rule sets or of the fact that a given generating 
rule set is indeed for a certain program, will be long and 
tedious (which has been the case in Section 4.5 and 
Section 4.7). Because dt's are highly structured-objects, 
it is our belief that a good formal system can be found to 
talk about them. 
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6. In practice, generating rule sets will face the follow, 
ing difficulty. The generated dt for an input instance will 
often be of a size which is exponehtial with respect to the 
size of the input. A possible way out that may be investi- 
gated is the use of an interpreter for the generating rule 
sets which is like a lazy evaluator, as given in Henderson 
and Morris (1976). The goal of such an intearpreter will be 
to generate only that path in the dt, specified by the 
generating rule set, \diich is relevant to the given input- 
instance. 
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APPENDIX A 


STRONG NP-COMPLBTENESS OP INTEGER FEASIBILITY 
PROBLEM AND THAT OP SOME OP ITS 
RESTRICTED VERSIONS 

Integer feasibility problem was defined in Chapter I 
and in Chapter II an algorithm was developed to solve the 
problem. In the worst case, the algorithm has to search 
the entire solution space. That we cannot do any bettor 
is the conclusion of this appendix. 

If a problem P is shown to be NP-complete^ then it 
implies that, with the present level of knowledge about 
algorithms, no algorithm can exist which will solve P in 
time polynomial with respect to the length of every input 
instance. The complexity of an algorithm that we can design 
for an NP-complete problem will be equivalent to an algori- 
thm that searches the entire solution space. If a problem 
has a polynomial-time algorithm then the problem is des- 
cribed 'tractable' and the^ such an algorithm is called 
'efficient'. 

It is well known that the integer feasibility problem 
is NP-complete (Karp (1972)). However, if a problem, as 

1 For the definition of NP-completeness and its ramifi- 
cations, we refer to Aho etyal/ (1974). 
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integer feasibility does, belongs to the class of number 
problems (defined presently) then mere NP-corapleteness 
result of the problem does not rule out efficient algorithms 
(for the problem) for reasonable^ input instances. In other 
words, an NP-complete number problem may derive its intrac- 
tability only due to the possible presence of very large 
numbers in its input instances. 

However, strongly NP-complete number problems remain 
intractable even v;hon their input is restricted to be reason- 
able. Before wo discuss the strong NP-completenoss of the 
integer feasibility’- problem, we require the following 
definitions, all from Garoy and Johnson (1978), 

Definition 1 ; A problem P is called a numbe r pz’ob lom if 
there exists no polynomial p such that for every instance 
I of P 

rfex [I] <,p (L-ngth [I]), 

whore Max [I] is the magnitude, of the largest number repre- 
sented in I and Icng-bh [I] is the length of the usual repre- 
sentation of I. 

D efinition 2; If P^e a decision problem and p is a poly- 
nomial, then P_ denotes the problem obtained by. restricting 

' Jr 

P to only reasonable input instances, i.o,.to instances like 

^ ^ ^ .r- - • 

1 A reasonable input has only those numbers whose magnitude 
is polynomially bounded by the length of the input repre- 
sentation. This definition is from Garey and Johnson (1978). 
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I for which Max [I] does not exceed p (length [I]). 

Then, P is IT P-hard in the s trong sense j.f there 
exists a polynomial p such that Pp is NP-hard, P is NP- 
complete in the strong sense or, for brevity, stro ngly NP- 
complete if in addition P belongs to ITP. (End of definition), 

Garey and Jolmson (1978) shows that the import of 
proving a number problem P strongly NP-complete is that in 
that case P, even when restricted to reasonable inputs, will 
be intractable, (They also include an example of an NP- 
complete number problem which admits an efficient algorithm 
for reasonable inputs. Thereby they show the difference 
between NP-completeness and strongly NP-completeness for 
number problems). 

, ^ The follov7ing lemma shows the strong completeness 

» 

of integer feasibility problem. 

L emma; ■ Integer feasibility problem is strongly WP-complete, 

Proof ; Given an instance of the problem, the search space 
for a solution is clearly finite as both the lower and upper 
bounds of each variable is known. So, a non-deterministic 
*^ur ing machine can guess the solution (if it exists ) and 
then check that the solution satisfies the constraint set 
in linear time. Hence, the problem is in NP. 
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Next we show the NP-hardness of the problem by 
reducing the conjunctive normal form (CNP) satisfiability 
problem to our problem in accordance with the definition 2 
above, 

(The CNP satisfiability problem is to decide if an 
expression consisting of terms joined by conjunction is 
satisfiable or not, when each term is the disjunction of 
some literals, each literal is either a Boolean variable or 
its complement.) 

Given an instance of the CNP satisfiability problem, 
for each Boolean variable x we define two non -negative 
integer variables, x' and x' , each having upperbound 1, 
x' corresponds to the Boolean variable x and x' to its 
complement. So, we have an integer variable for each literal. 
Now, for each tern in the CNP-satisfiability problem we 
construct a constraint 

u + V + , . . t. 1 , 

where u v ... ere the integer variables corresponding to 

» » 

all and only the literals present in the tern. To the set 
of constraints obtained in this fashion, append a constraint 
for each Boolean variable, which, if the Boolean variable 
be X, is 


X* + x' 


1 
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If we interpret that an integer variable has value 1 
iff the corresponding literal is assigned 'true', then 
clearly the CNF expression is satisfiable iff the above 
constructed set of constraints is feasible. Moreover, it 
is easily seen that the constraint set can be constructed 
in t ime linear to the length of the representation of the 
CNP-expression. Also, the magnitude of the largest number 
present in the constructed instance of the integer feasibi- 
lity problem is onlj’- unity, thus trivially satisfying the 
definition 2 for a problem to be strongly NP-liard, 

Hence the Tiemma. 

This lemma tolls us that an attempt to find an effi- 
cient algorithm to solve the integer feasibility problem, 
by Restricting the input instance number magnitude oven 
down to unity, will be futile. Next we show that restric- 
tions on the structure of constraints also do not help. 

It is well known that the CNP-sat is f lability problem 
when restricted to having not more than three literals in 
every term, still remains HP-complete, Therefore, following 
the arguments of the previous lemma we can conclude that; 

/Integer feasibility problem, with the structure of 
each constraint restricted to having (a) only -unity as 
coefficients and (b) three or less variables, still remains 
strongly NP-complete. 
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The above restrictions are severe enough. Nevertheless, 
we furnish below a reduction which indicates the strong NP- 
completeness of the integer feasibility problem when in 
addition to the restriction (a) above, we have most of the 
constraints are in only two variables, 

lemma ; The unit-execution time (UBT) schedul.^ng problem is 
polynomially trensformable to the integer feasibility problem. 

Proof ; UET scheduling problem is to determine irhether or not 
there exists a schedule for n unit-execution-time tasks on 
m processors with time limit w under given precedence cons- 
traints. The NP-completeness of this problem is proved in 
Coffman (1976), 

Por the reduction, let us first define n.w non-negative 
integer variables, with upper bound l,x^j, lli^n, llji,w> 
which have the following moaning. 

1 iff task i is to be 
^ run at time slot j 

"'ll 

0 otherwise. 

Next, we hnvo the following throe classes of cons- 
traints. 

Class I ; 

w 

Xj j — 1, for 1 = 1, 3, . . • , 

.i=l 


n 
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such a constraint ensures that the task i will be run at 
sometime or the other. 

Class II; 

? X. . < m , for j = 1,2 ,... , w • 

i=l 

such a constraint ensures that at a certain time slot not 
more than m jobs nre scheduled and thus keeping to the 
processor limit constraint. 

Class III ; 

Suppose the precedence constraints specif' that job 
u proceeds job v, fhen we adjoin the following constraints 

*u(3+l) - ^ 

*uw i 1 - *vj 
for each j s 1,2, ..., w. 

So, for each precedence constraint, wc have 
class III constraints. 

Reasoning behind these constraints arc as follows. If 

= l^thon x^j» \i(j+l)* ^w 

if task V is scheduled in the time slot j , th^J" task u cannot 
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te scheduled at the J-th or at any subsequent time slot. As 
every task will bo scheduled (constraints of class I) in an 
acceptable scheduling, task u then will have been scheduled 
prior to time slot j. This way, the precedence constraint 
is honoured. 

It is not difficult to see that there exists a schedule 
iff the set of all constraints constructed has a solution. 

For p precedence constraints, the sum total of all 
the constraints is: 

n + w + p 

2 

p is bounded by n , w cannot exceed n in a non-trivlal 
problem and so we have polynomial number of constraints with 
respect to the input. So, the set of constraints can be 
constructed in polynomial time. This concludes the proof 
of the lemma. 

Now, in a nontrivial UET scheduling problem the mag- 
nitudes of w and m are bounded by n and as the number of 
constraints exceeds n, the length of the representation 
of the constructed integer feasibility probloji will exceed 
the three non-unity numbers, m, n^and w. So, again definition 
2 is satisfied. So, the above reduction prove;s. the NP- 
hardness of the (restricted) integer feasibility problem. 
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The importf'.nt point is that here the restriction that 
most of the constraints in the integer feasibility problem 
will be only of two variables almost alwsiys. Two -mriable 
constraints will be of majority, even when tliere is only 
one preceedent constraint and n < — ^ . As the number of 
precedent constraints increase, number of two variable cons- 
traints will increase rapidly. 

Therefore, we conclude that the integer feasibility 
problem, with each constraint restricted to having only unity 
coefficient for vai-iables and majority of the constraints 
being only in two variables, still remain s strongly NP- 
complete. 
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CONVERSION OP A SET OP NON-SIMPLE CONSTItAINTS TO AN 
j^QUI VALENT SET OP EQUATIONS 


To use agcregation for the set of non-simple constraints, 
it is necessary to convert the set to an equivalent set of 
equations where each equation is of the tsrpe: 



^i 



having each coefficient a^ ^ of a variable as a positive 

J 

integer. 

We indicate below such a conversion which is possible 
because we have assumed that an uppenbound is available for 
each variable. Given a set of non-simple constraints, the 
conversion produces a set of equations E using the following 
six steps for each non-simple constraint. 

Step 1 : Move oJ.1 non-constant terms of the constraint to 
the left of the relation operator of the constraint and 

f,' 

move all constants to the right of therelatioh operator. 

S 

(The relation^ operator can be any one of the 
set {<, <, ~ 

Step 2: If the relation operator of the constraint is of 

the strict type (i.e. > or < ) then change it to the corres- 

ponding non-strict type (i.e., or ^ ) by subtracting unity 
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from the right-hand side for < or, by adding unity to the 
right-hand side for > • 

Step 3 ; If the relational operator, at this stage of 
conversion, be t. » then change it to _< by multiplying both 
the right- and left-hand sides of the constraint by -1. 

Step 4 ; Any simplification that is possible, by collecting 
terms of the constraint, is carried out. (B.g.,3x + y - x ^ 4 
is simplified to 2x + y <_ 2). 

Step 5(a) ; If any variable, say x, after the last step is 
found to be with a negative coefficient, then the variable 
is replaced with (u^ - x), where u^ is the uppei*bound of x 
and X is its complementary variable. This is done for each 
variable with negative coefficient. The resultant constraint 
is simplified by moving the constants in the left-hand side 
of the relational operator to its right-hand side, 

(b); For every variable x, whose complementary 
variable x has been used, add x + x = u^ to E, the 
system of equations that is being produced, (u^ is as above). 

Step 6: If the constraint after the ias't step has ± as the 
relation^ operator then it is changed to equality by intro- 
ducing a slack variable. The constraint of this stage is 
added to B, the system of equations. 
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Let us consider the following constraint; 

3 + 2x + 7y - 5z > 4w + 17 , 

where 8 is the uppe]^ound of x and rest of the variables 
h^e 3 as the uppei^ound. 

The given constraint, at the end of Step 1 becomes; 
2x + 7y - 5z - 4w > 17 - 3 
Next, on completion of Step 2, we get, 

2x + 7y - 5z - 4w > 17 - 3 + 1 
Step 3 transforms the above to: 

-2x - 7y + 5z + 4w ^ -17 +3-1 
Step 4 simplifies to 

-2x - 7y + 5z + 4w £ -15 

Step 5(a) introduces the complement variables to obtain, 
-2(8 - x) - 7 (3 - y) + 5z + 4w < - 15 
which, on simplification becomes, 

2x + 7y + 5z + 4w i 22 

Step 5(b) adds x + x = 8 and y + y = 3 to the system 
of equations. 

Step 6 adds a slack variable s to get from the above 
inequality the following equation, 

2x + 7y + 5z + 4w + s *= 


22 . 
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TWO NECESSARY CONDITIONS FOR INTEGER FEASIBILITY 
WITH EQUALITY CONSTRAINTS 

In this appendix, we have given two necessary condi- 
tions for a set of equa lity constraints to have a solution 
in non-negative integers. These conditions, as x/e shsJ.1 
see, are quite inexpensive to check. 

Let the set of equality constraints be a system of 
m equations in n veriables. We denote this system in 
matrix notation as 

Ax = b , 

where A is an m x n 'Jietrix, x and b are column vector with 
n and m elements respectively, (Wc shall follow the con- 
ventions that ^ capital/letters denotes matrices, small 
letter^ with a bar denotes column vectors and small letters 
denote scalers and variables), x is the vector of variables. 
Clearly; 

Necessary Cond ition 1^, 

The system of equations must have a solution in 

reals . 

As every integer by definition is a real, this 
condition follows trivially. To check, let denote the 
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m X (n + 1) matrix uhich has columns of A in its first n 
columns and b as the (n + l)-th column. It is well-L-nown 
that the necessary and sufficient condition for tlio system 
of equations to have a solution in reals is 

ranlc of A = rank of A^ 

The proof is given in Hadley (1961) which also gives 

an efficient algorithm to find the rank of a matrix. For an 

2 

m X n matrix, this algorithm takes m n elementaiy operations 
(additions and multiplications). 

Next necessary conditions is about the values a 
variable takes in the solutions, V/hen the system has only 
ono solution, (which is indicated when rank of A = rrank of 
A-jj = n), then the solution can be found out easily and checked 
if all values in the solution are non-negative integers or 
not. On the other hand, when rank A = rank of A,^ < n, (a case 
that occurs very frequently) there will be an infinite set of 
solutions. Yet, it is possible that in none of the infinite 
set of solutions, a certain variable takes a non-negative 
integer value. Clearly, then, there exists no non-negative 
integer solution to the input set of constraints. How to 
detect such variables? At this point, following lemma will 
be useful. 
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Lemma ; If there exists an infinite set of solutio:is in 
reals for a given S3rstem of linear equations, then for each 
variable x^ of the system either; 

1) in each solution x^ has the same value, 

2) for any arbitrary real q, there exists a solution to 
the system in which takes the value q. 

Proof ; It is well Iciown that if x' and x" be t’ro solutions 
to the system, then for any arbitrary real ^ , Xx'+(l-x) x" 
is also a solution to the system. In this new solution, the 
value of Xj^ will be A x^ + (1 -a) xj^' , where and xj* are 
the values of x^^ in the solutions x' and x" respectively. 
Setting q to this new value and solving for we get: 

A= (q - Xj,') / (xj - xp. 

So the solution to A exists if xj^ and x^' nro distinct. 
Hence, if x^ does not take a unique value in all the solutions, 
there exists a solution in which x^^ will have the value q, 
for any arbitrary real q. 

Now, our second necessary condition can be written 
concisely as follows; 

Necessary Conditio n 2 : 

If a variable takes unique value in all the solutions 


in reals to the system of equations, then this value must 
be a non-negative integer. 




Such variables can be detected from the following 
considerations , 

Clearly, such a variable can never become nonbasic 
(for definition, /See Hadley (1961)) because then it will 
take any arbitrary value as a solution. On the other hand, 
let us assume that a variable is present in every basis 
of the system. This will be the case iff aj^, the column of 
A associated with is linearly independent of the other 
columns in A. Now, suppose, takes two distinct values, 

Pj_ and qjL solutions belonging to p and q respectively, 
two solutions of A x = b. So, we can write, 

ai P]_ + a2 p2 ••• + p^^ 

= b 

= Q3 -1- a2 <l2 ^ 

(P2^, are the elements of p and ..., Qj- are the 

elements of q). 

So, we get 

+ (^i+i - Pi+i) a^+1 + ••• + (^n " ^n^ 

As Pj^ and q^ are distinct, we have represented aj^ as a 
linear combination of other columns in A contradicting the 
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assumption that is linearly independent. So, if a 
variable is present in every basic solutions then it takes 
a unique value in all solutions. Hence we concludes 

Lem ma: A variable ha.s a unique value in all solutions if 
and only if it is always in the basis. 

So, if a variable takes a unique value in all the 
solutions-, this case will be indicated by the linear inde- 
pendence of the column associated with this variable from 
the other columns in A. To check this for a variable 
we define A*”^ as the matrix A with column a^, and x' as x 
with Xji^, dropped. Then if 



does not have a solution in reals^then column aj, is linearly 
independent of the other colinnns in A, and so x^^ takes a 
unique value. This unique value can then be obtained from 
any solution of A x = H and the value can be checked if 
it is a non-negative integer. If so, we can replace every 
occurrence of x^ in all the input constraints and thereby 
obtain a reduced system. On the other hand ^if the value is 
not a non-negative integer, we conclude the entire set of 
constraints is not feasible for our purpose. 

To discover if a given variable x^ takes only a 

2 

unique value as solution we need to do about m n elementary 
operations. The cost of checking the second necessary condi- 
tion then is about m n elementary operations. 








